moved embed panel nonce call to template tag
added new setting for disabling page fetching, fixes #7