stripslashes where it counts: when we're dealing with POSTed data

See #164
Closes #150