Merge pull request #64 from jasondavis/master

Closes various theme 'bugs', these are bug #565, #567, #573, #570
Xss encoding, encoded information

QA TEAM TEST! This should stop the encoding of the already encoded html entities.

I currently don't have a ZPX set up so can not test this but reading PHP documentation (http://php.net/manual/en/function.htmlspecialchars.php) it should work fine.

If some one could update there server and email me login details i shall test this.

This needs testing that "Chers clients, vous êtes invités à" display correctly in inputs.
Also checking that it escape all Xss attempts! **Quick** test just past the below in a text box and check that no JS alerts are shown.

';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>

Related Bug: http://bugs.zpanelcp.com/view.php?id=571
Merge pull request #65 from motters/patch-1

Xss encoding, encoded information
Fixes bug #578 (http://bugs.zpanelcp.com/view.php?id=578), tgates reported that if a user uses the 'Logout' link while inside a 'shadowed' account once the user logs back in the red bar still appears. Needs testing as I don't have access to upload to my testing server from work but should work perfect.
Fixed Bug#585 (http://bugs.zpanelcp.com/view.php?id=585) Theme manager can now select and use alternative CSS files.  Global CSS files like Bootstrap are now moved to gloabl-css/ folder as the CSS folder is read and displays all available CSS theme files.  Other minor tweaks to make this all work as it is supposed to.