Enable Jinja2 autoescape

* also remove 'safe' filter in tooltip descriptions until
  we integrate tag/attribute whitelisting
Merge pull request #45 from reciprocity/feature/autoescape-templates

Enable autoescaping for Jinja2