basic xss filtering
request is a devDependency
send csp headers

 - make server in `server.js` require-able
fix fixtures

we just use `name` as a property
allow to submit twitternames

 - additionally raise limit for description to 10 in angular
   frontend
tweet about your submissions
use getcreatedFromCookie
fix wording
better assertion in test
prefill twittername with @, cleanup test-asserts `@` cleaning