fixed Base64 reference
fixed nonce so it's not time-based