fixed an xss vulnerability, where people could use html in their name to execute it on everyone's scoreboard.