add hidden nonce field to signin and signup forms