client side input checking

invalid guesses? #4 (closed) empty hints?