Use wp_verify_nonce instead of check_admin_referer so that we can fail g...

...racefully if the nonce isn't valid.
doesn't this fail if the $_GET param doesn't exist?