Implement report command

Sends a button to the staff room which when clicked, starts a PM with the user and alerts other staff that the user has been helped.
You need to sanitize `user.name`. I believe the relevant function is `Tools.escapeHTML`.