html apostrophe and avoiding negation when verifying nonce