got rid of xss in guestbook