refactored ajax_message.php to account for using different templates
moved nonce handling to the metabox class
fixed bugs with saving metabox positions