Request expiry and nonces