Tournament notes UTF8 decode and XSS control

Tournament notes are UTF8 decoded in the edit form and view screen;
values are also passed through htmlentities to avoid XSS, etc.