Update controllers.js

Prevent htmlDecode returning NULL, return empty string instead