Add nonce verification