Don't escape comments being saved into the DB
Add flag for double encoding HTML, and stop double encoding by default

This should fix #1143 properly without side effects.
Previously comments were escaped in the DB , this should encode dangerous
html but avoid double encoding.