sanitized gen_ajax words

No sanitization of the "words" parameter was done. This would allow somebody to request a billion words, possibly consuming all the available RAM in the system.