removed controller.js

was never using it in the first place
fixed possible XSS vulns in events.js

working on issue #1
small cleanup to globals.js
double quotes for keybindings.js
tried to clean up keybindings.js a bit
fixed possible XSS vuln in signalr.js
fixed weirdness in timer.js