Adds nonce check for bulk actions

This addresses #4.