[WO-406] do not use atob for decoding base64 strings

Also unifies base64 decoding in Node and in the browser (no `Buffer('base64').toString('binary')` anymore)