use `~username' as tab title if the page doesn't have any headings

Thanks to the fact that we're using a bigger buffer in the net process, and thanks to the way otto@' malloc works, it was easy to detect this off-by-one in a large page (RFC3089 in particular).

p->buf and buf almost always overlap. This means that once we free(p->buf), buf becomes invalid. It probably never crashed on memcpy since because the buffer is almost always quite small.