Enable autoescaping for Jinja2

Note, I disabled the 'safe' filter in tooltips (for descriptions)until we have a tag-whitelisting solution.