refactors NotificationComponent
sets response header on js-lang file
[api] adds shoutbox test cases
fixes XSS possibility in shoutbox

don't sanitize on db request anymore, because it is used by api call only
changes html notifications from webkit to standard
Merge branch 'develop' into feature/api-shoutbox