Ok, nonce verification is added. Weird, sometimes i got a successful result by using the same nonce, only after a random 5-10 sec time it was unauthorized. Also signature not always matching. Need to smoke test these more, later. Otherwise, by design, concept, theory, it works as expected.