new_player href sanitization

Prevents players from modifying another player's preferences and
character setup.
Merge pull request #836 from Zelacks/hrefpreffix

New player option screen href exploit fix