minor fixes
test conversationRepository
prevent xss attacks