Activity Stream

Branch for activity stream commits. Still WIP. Will post comments in https://assembly.com/buckets/bounties/82 to keep it all in one thread.
Yep, sorry, you're right. In that case, though, let's just escape `name` since I think it's the only one susceptible to invalid user input-