Validate the action
Send a nonce value with the ajax request
Send once through to callback
Merge pull request #298 from pdewouters/add-ajax-nonces

Add ajax nonces