added markdown and sanitizing on both server and client (very safe)