wrap the nonce error message in some markup