The check for request including a nonce and response not having it was

inversed.  Corrected.  Hopefully, this will make it work without
dumping core.