route via the edit.php rather than event manager
add nonce