nonce for contractor page