Review and changes from Jocelyn Fiat

right .. and it did occurred .. I forgot how but I have this case
maybe when you authenticated once ... restart the application (i.e the server) and go to the same page again ... in this case the browser send again the Authorization ... but the nonce list is empty ... after the server restarted.