Implement report command

Sends a button to the staff room which when clicked, starts a PM with the user and alerts other staff that the user has been helped.
You need to `escapeHTML` `target` as well as escaping quotes.
Otherwise I could do something like this:
`/report &#10;/ban someuser` or `/report " value="overridden value" asdf="` etc etc etc