Fixed XSS Bug / MacOS

and also allow IE ;-)
fixed location lookup
New Password encryption