better security and archiving

no more csrf and xss (thanks to HTMLPurifier) attacks :D
also, you can now generate a JSON archive of pretty much anything about
you stored by Pulsir