add youtube picture grab
bugfix
fix xss
add previews to posts & comments