changed all templates to print escaped characters
added escaping to JSP display
further escaping on approval page

closes #634
makes the grant types checker softer, closes #640