add nonces to all action methods