various bugfixes and new features

properly decode input data on server
initial cut at invites (email only)
cursor motion
highlighting (broken)
text deletion