XSS fixes; other changes

* Remove initialization message. Should be less distracting without it. In principle perhaps it could be a spinning icon, but text adds localization burden.
* Remove link back to repo; replace with link in header.
* Remove "first" and "last" classes.
* Use jQuery HTML encoding to avoid XSS.
* Break up rendering for readability,
* Add MIT license to header.

These changes thanks to digger3 and nextgens - all I did was break them up.