Fix XSS hole exposed through ad hoc report title
Merge pull request #18 from KoryHodgson/master

Fix XSS hole exposed through ad hoc report title
change the Excel class so that it’s capable of rendering an empty spreadsheet, instead of barfing a 500 error!

also add the isAuthorized function to the controller…
restyle & rename some CSS classes
removed isAuthorized, removed message in Excel export, and left a comment about the logo