Correctly add and handle nonce in meta box