who even puts urlsafe base64 inside json