- fixed variable auth.nonce and auth.cnonce (backport from trunk)

Credits for reporting go to Nick Altmann
Closes bug #659