WIP: AJAX security improvement reviewing all nonces