fixed syntax error in ActiveUser and updated ChatClient to prevent javascript injection into the chat client