Add nonce

[kvsun-editor]

This will probably require a master form submission handler as well, but create and check nonces to verify that form submissions are not forged.