Added missing hogan.js dependency
Cleanup overlay script
Make upload handler reliable against namespace attack. Name rendering cleanup is pending.
CSRF protection for forms