computeHAWK: payload hash is non-URL-safe base64

This was causing HAWK failures on about 74% of certificate/sign
requests, depending upon the hash of the public key being submitted.