fixed base64url logic