Upgrade Cakefile, fix XSS in __escape by using underscore.js, update README