Added support for multiple URL-safe chars in base64 tokens

The urlBase64Decode function replaced only single instances of URL-safe characters in the Base64 token string. Replacement regex now changed to global replacement.