Add nonce validation

CHANGELOG.md

@@ -1,3 +1,9 @@
+# v1.0.1
+## 10/21/2015
+
+1. [](#improved)
+    * Use onAdminMenu instead of the deprecated onAdminTemplateNavPluginHook
+
 # v1.0.0
 ## 10/21/2015
 

templates/partials/comments.html.twig

@@ -21,6 +21,8 @@
             <button class="button" type="{{ button.type|default('submit') }}">{{ button.value|default('Submit') }}</button>
         {% endfor %}
         </div>
+
+        {{ nonce_field('form', 'form-nonce') }}
     </form>
 
     <div class="alert">{{ form.message }}</div>