fixes for #4 and added a lot of escaping

- added textArea for confirm dialog (no styles yet)
- fixed change comment JS
- added custom JSTL taglib for custom funtions (ElFunctions.tld)
- added escaping for user names and json escaping inHTML javascript