Use wp_verify_nonce instead of check_admin_referer so that we can fail g...

...racefully if the nonce isn't valid.