Check for HTML in submissions

This PR will not allow submissions with "<a" or "<p" in them.  It's a crude first filter but should bypass most spam as the spammers don't seem to be targeting this site specifically, just broadly submitting any form they can find.