b64url URL friendly base64 encoding: '+' replaced with '-' '/' replaced with '_' trailing '=' removed