Fixing script injection vulnerabilities.

Noticed the potential for some script injection when I was peeking at the code.
Also went ahead and specified a version for jade as the most recent version throws an error without changes applied to the index file.