bugfixes!

- `/me` now works and won't crash the bridge
- HTML entities are now escaped from/to Mumble