Added HTML escaping, enter-to-send functionality and username saving (clientside).