added name and email fields and ghetto validation
sanitized for xss