adding htmlentities to the fillin input

https://jira.huit.harvard.edu/browse/QUIZ-68

@arthurian should be an easy review