Fix some interesting behavior when adding a signature to a message that

included personal names with quotes in them. I stumbled on to this,
and Jon pointed out it was actually an XSS bug. Whee. ;)

src/compose.php

@@ -853,6 +853,10 @@ function showInputForm ($session, $values=false) {
        $mailprio = $values['mailprio'];
        $body = $values['body'];
        $identity = (int) $values['identity'];
+    } else {
+       $send_to = decodeHeader($send_to);
+       $send_to_cc = decodeHeader($send_to_cc);
+       $send_to_bcc = decodeHeader($send_to_bcc);
     }
     
     if ($use_javascript_addr_book) {