Add additional noncing to protect from accidental linking to certain PodsUI actions; Add noncing to settings tools, though still restricted by $_POST check