[2.2] Fixed nonce check in form handler