BUG: nanops.var produces incorrect results due to int64 overflow (fixes #2888)

fixes #2888