Add wp_create_nonce to list of auto-escaped functions

Closes #173

/cc @westonruter