$ 0 0 Nonce validation requires the cookies to be set. Are the cookies headers properly set / forwarded? do you use varnish or some other proxy?