Clean internal ids in ml(), that it matches with fetch.php

The resize token was broken because fetch.php cleans the id before the token calculation, while ml() uses the raw id

Additional: some extra tests for cleanID, that shows semicolons are removed.