Escape messages; add form error message

* When displaying financial aid application messages, escape the text
  for security.
* If there's an error on the financial aid application form, display a
  message at the top so it's more obvious.
Merge pull request #158 from caktus/feature/finaid-application-feedback

Escape messages; add form error message