Sanitize HTML in some Story fields

Use the bleach package to sanitize HTML in a Story's ``title``,
``call_to_action`` and ``connected_story_prompt`` fields.

Don't escape HTML when displaying the connected story prompt.

Addresses #894
Merge branch 'master' into develop
Merge branch 'develop' into 579-rework_workflow_steps