added nonce to prevent csrf
added form validation
version bump