SECURITY: fix ability to set submitterID via form data
UTF-8 support on encounter form input, as it should be!