Avoid XSS vulnerability by escaping the autocomplete input text

* Escape text entered into the autocomplete text box
* Because this text is rerenderded in the autocomplete menu as the email needs to be escaped otherwise JS renders

https://trello.com/c/IcihHdPx