Escape messages; add form error message

* When displaying financial aid application messages, escape the text
 for security.
* If there's an error on the financial aid application form, display a
 message at the top so it's more obvious.