some fixes for installating/updating/activating plugins over the marketplace, use nonce for activating plugins instead of tokenInUrl