! Try to make sure the DB session serializer is indeed using one we know...

... to be safe (fixes #277)

! Extra sanitisation goodness when searching PMs, making sure to take everything through the query layer (fixes #627)

Signed-off-by: Peter Spicer <sleeping@myperch.org>