XSS bugfixes
JS bugfixes
Add context header
Add rest of models
Project controller and views