Adding autoescape protection to forms