Move the additional free() call that was added to bbs.replace_text(), otherwise

we are always freeing the pointer that was asigned the text.dat list and things
will crash (thanks for the report, Rastus).