Fix #20 without causing XSS
move jade runtime to vendor
add security module to fix #28
remove console log to resolve #29
add overrustle module to resolve #23