sanitize attachments and hide form

filenames sanitized for attachments to stop bug where picture(10).jpg
did not send.
group email form hidden when not logged in.