now with full reply support, some input sanitation, and proper forms so you can submit with the enter key