Added XSS spring security.
Fixed inactive players.