fix html injection in messages

wrap urls in messages with anchor tag
some styling changes
added error message when message length > 200