API Escape form validation messages (SS-2013-008)
FIX Auto-escape titles in TreeDropdownField

Related to SS-2013-009. While the default "TreeTitle" was escaped
within the SiteTree->TreeTitle() getter, other properties like SiteTree->Title
weren't escaped. The new logic uses the underlying casting helpers
on the processed objects.
FIX Escape breadcrumbs in SecurityAdmin (SS-2013-007)