Check nonces for every single setting in the admin

[benlk]

In #19, every settings field gained a Wordpress-style nonce. But not all of the validation callbacks actively check nonces, so we should probably give each different setting its own validation callback, which would in turn check that setting's specific nonce.