fixed redundant base64url encoding/decoding of signatures