decode base64 buffers in place (no copying!)