This is an important security release Security fix: added nonces to prevent CSRF (props @dtbaker)
New: `facetwp_api_valid_actions` filter Improved: set `X-WP-Nonce` header (REST API auth support) Fix: REST API issue w/ PHP 5.3 (closures don't support $this yet) Updated flatpickr
