base64, nonce, and credential patches

* Includes @jhk753's `Base64` fix.
* Incorporates a security update to provide a stronger `nonce` which is not purely time-based (but still strictly increasing per API rules).
* Pulls `API_KEY` and `API_SECRET` values from `ENV` to make life easier.
* Version bump to `0.3.0`.