Enables autoescaping in templates. Removes manual |escape filters from user view.
Escapes html in chat messages.
Adds friends list to user view and styles it.
Removes control group div around user images on user view in favor of a larger image.