docs Makefile: use the system's sphinx-build
always escape stringified fields!

don't want that? use a __html__ method.
forms: don't mess with "eval"