fixes #18 by checking for admin rights and nonce before marking attended with AJAX.

refs #32 and #33 because I used the new code added to Camptix 1.4.2