Merge pull request #3 from bietiekay/master

state save bugfix and version to be embedded into any website
fixed XSS problems in embed and client