Bug with not using nonces