switch from require to render for navbar
add htmlspecialchars()