Fix missing security checks

Removed ajax callback for get_subaccounts
Fixed nonce/cap checks for:
* get_categories
* get_videos
* set_thumbnail_ajax
* upload
* edit
* embed
Security improvements

Improve security by using unique nonce per action
Rename localized js objects and divide into logical units