Turning autoescaping back on

This should have been on all along (to prevent XSS), but was turned off because of changes made to Nunjucks in 0.1.9. Until the Nunjucks fix is released, we'll just have to manually mark all `super()` calls as `safe`.