Content sanitization and HTML5 lib for security, added login boilerplate for consistency (though we hit db on every login check, maybe a offload to memcache), begin implement project member handlers