XSS protection + added the ability to create posts without tags

// cc @tadatuta @tormozz48 @gela-d 
ok, I will remove comments