Added nonce to attachment custom fields

Simply appended to CC credit form field. Should work but merits
thorough testing.