Add timestamp and nonce to auth_token mechanism.