some refactoring and beautification
fixed production server compatibility
  * applied base64url standard mentioned in issue #21
  * used "yesod booleans" (aka "yes" and "no" instead of "true" and "false") for the move parameter