escape output
be explicit when getting request vars
check user caps before saving
incrementing stable tag in README
Merge pull request #5 from voceconnect/vip_fixes

escape output