Merge pull request #2 from pdewouters/master

adding a nonce verification field; Thanks for support and enhance this small solution.
escape attributes