use the nonce package instead of doing it ourselves, also update URL