Implement report command

Sends a button to the staff room which when clicked, starts a PM with the user and alerts other staff that the user has been helped.
Would make more sense to `escapeHTML` on `assisted` and `pm` instead of escaping every single tiny thing in each of them.