Hotfix/storage js fixes

# Purpose
Fix a few minor bugs in the file detail page for OSF Storage

# Changes
* HTML-escape strings passed through Mako to Knockout (it's a hack, but it's quick)
* Fix download URL for OSF Storage files immediately after upload

# Side effects
None expected