wrapping unescaped ${statement} outputs in <c:out ... /> jsp tags to conquer XSS
wraps usage of patientIdentifier in <c:out ...>
Merge pull request #447 from MrMarvin/fixing-TRUNK-3931

TRUNK-3931 wrapping unescaped ${statement} outputs in <c:out ... />