Fix a bug with base32, fixes #14

Dropbox uses a 26 character string for the secret. The current
base32 decoder was incorrectly decoding strings that were not
a multiple of 8 in length.
Backfill the changelog