XSS, Modularization

Fixed persistent XSS vulnerability in "hashlist".
Unescaped characters in URL when requesting a hash from doHash.
Separated all routes from index.js.
Added "entities" and "jsesc" modules to package.json