Give plain text error page

instead of letting the browser decide the content type
Don't allow spaces in hostnames
Merge pull request #21 from Factlink/fix-xss-in-errorpage

Fix xss in errorpage