Initial toy application
Got the thymeleaf stuff setup with a trivial xss test