add ajax nonce, push to 1.0.3, fix screenshot