Lack of validation in setlistforsell allows changing denom while there is active bid, leading to stealing of other users' funds

Lack of validation in setlistforsell allows changing denom while there is active bid, leading to stealing of other users' funds #185