Fixes XSS vulnerability
Passes JSON instead of raw HTML as a message
Adds a 'chatters' event that sends the currently connected users