added prioritized error messages
escaped html chars in submission