htmlspecialchars be called with ENT_QUOTES

Conflicts:
	assets/snippets/jot/jot.class.inc.php
Sameorigin header
config.inc.php to have setcookie specify httponly