Escape comment author name and text better in HTML

In the HTML generated for tooltips for issues and notes neither
comment author name or the comment text was escaped, leading to
incorrect display, and possibly other bad things.  Comment author
names were also not escaped in HTML in a few other places.

Also make some more URLs absolute.

Also fix tooltip on newly created comments.