Issues #1 and #2

Escaped HTML in global chat and private chat nicknames and messages.
No XSS should be possible now.