Closed #87 - disallow html in name fields