Add HTML escaping to views.py in the wiki2 tutorial

At least it's less obviously dangerous this way.