fixed /nick and /me manipulation vulnerabilities