now htmlspecialchar-ing user output
initial commit
moved sidebar to its own rendering class