add editbox; fix the escaping; add a session judge for login.