[PRIORITY] Repairs major security exploit and potential infinite loop on startup

Was calling /turf/simulated/mineral/New() every time random/New() was called, proc'ing /New() again and subsequently random/New(). Now New() is only proc'd from random if the mineral actually appears.

UPDATE: Fixes html exploit regarding copying a paper and having it's html decoded and displayed. Removes html due to being able to execute javascript.

Ignore the admins.txt commit. My git decided it should upload my admins.txt so I removed that and re-committed it.

Fixes #1957