Escape HTML in battle winner declaration
Plug XSS vuln
April Fool's 2014
Report IPs from unregistered servers

Right now, unregistered servers often get unclear error messages
about why laddering and replay saving doesn't work. This commit
attempts to clarify those error messages.

In addition, servers that make requests from different IPs from
their registered IP didn't have an easy way to fix. Reporting
IPs should make it clearer which IP they need to register.
Merge remote-tracking branch 'upstream/master'
style changes