add ajax nonce, push to 1.0.3, fix screenshot

Using ajax should verify with nonce to make sure request is authorized ... even though most people should only use this and then disable it, we know most people will not and could possible leave open a security hole.

Bumped to 1.0.3 as well and fixed the screenshot for GitHub