fixed several xss bugs
Merge branch 'feature/security' into develop

Conflicts:
	views/booking/_theatre_times.php
	views/default/view_Element_OphTrOperationbooking_Operation.php