First draft on XSS protection in user console

A living document intended to summarize how to write XSS-free jQuery in User Console. More changes to come as we are still working out the details of jQuery and our implementation.