Merge pull request #1 from johnpapa/develop

removed html injection
added npm start