Use base64url instead of base64