Add HTML escaping to views.py

At least it's less obviously dangerous this way.
Merge pull request #1168 from jthemphill/patch-1

Add HTML escaping to views.py in the wiki2 tutorial