Include common settings and xssClean output

inlcude_once the settings-common.php file so we have the xssClean
function
Set $req to the xssClean'd value or blank
Also xssClean other strings that are output
Include this lib file only once

Is called from headers.php also now, so don't want to error by calling
again (clashing function names etc)