Fix for urls containing autoescaped characters

References issue #282.

I added an import for `mark_safe` and wrapped the JavaScript / CSS
urls in it. All tests passed.