remove the var module; introduce a new "cubescript" module containing functions for var management and cubescript code execution; remove the cubescript global (use core.engine.cubescript.execute); disallow capi access from sandbox; abstracted input event handling