Secure admin requests and factor purge days
Fix wp_verify_nonce() call
Move modules.php to includes/

Additionally seperate event addition from functions (install). Introduce
before/after update hooks.