Add wp_create_nonce to list of auto-escaped functions

Closes #173