add nonce to authz cookie, and minor bugfix with trailing slash

add nonce to authz cookie, and minor bugfix with trailing slash #607