Security fixes for bsocial

1. Make sure comment ids are integers
1. Add a nonce to the featured comment ajax stuff

See #7