Added check_nonce() & require_login()