Fixes to injections, bad-channel names

- Fixes possible JSON-DB query injection
- Fixes weird behavior inside DOM elements with weird channel names
- If the last message has the same sender as a new message, the new
message is just appended onto the last messages divbox
- etc