added nonce verification in update_user_meta method