Add Nonce check to Security filter