use nonces for installing and activating plugin