Prevent users from gaining too much hp and mp

Intended as a fix for #3660.
Additionally I added a check, that a user does has too much hp. Currently this is done at several places in habitrpg-shared.

By checking both values during each save, it doesn't have to be done each time those values are changed, reducing the code by a few lines and preventing human error by forgetting to add the check.