Changed from storing nonces on the filesystem, to storing them in the database.
When on the filesystem, the base64 of a nonce could contain special chars, like /, which messed up storage. The DB is not susceptible to this.
Moved validation of expiry of the nonce to the entity