Moslty Done.

Few more conditionals for the widget.
Ajaxed functions check for a nonce and user permissions.
Few other things.