closing #8 & adding $this->escapeHtml() view helper to all views to add more security