use urlsafe variants of base64 for http