Added html escaping and a few other features

Changes:
 - Added HTML escaping (fixes issue #1)
 - Enter-to-send functionality
 - Users preserve username after browser refreshes