paging - deal with invalid page parameters

just return page 1 if invalid (not int) in production mode but
fail in debug. this prevents intrusion attempts from spamming
me with email errors. there is no actual danger for injection
here.

said intrusion attempts look like:
?page=/proc/self/environ
by storyteller should filter by user, refs #857

if current user is storyteller, show all layers/maps