Escape html in requestor, user, and post sections prior to display

Escape html in requestor, user and post fields.  Also test this first because I'm pretty bad at ruby and I don't understand most of what I did.