Safely encode all print_r output (vs XSS attacks)

Fixes #32. Normal page output was safely encoded, but these print_r responses
were unsafe. I'm not intercepting them and apply htmlentities() in each case.