add recipe category page, use standard for user-data

All data a user puts in is in its unfiltered form (through either a
query string or a post).  Most methods also expect unfiltered data.
Data should be filtered before database access is attempted in almost
every case (unless it is data pulled from a previous database method
that hasn't been unfiltered).