Use <%- when interpolating XSS targets

  - I tried to not be super heavy handed, only using <%- for values that
    could be set with XSS payloads or otherwise come from a user/data.
Fix setting autoconf flags for using nifs
Fix ejson nif configure against R14B04
COUCHDB-2233 - Correct HTML interpolation instances in documents.

Further updating instances of <%= and to <%- within documents to correctly handle HTML interpolation.

Tested for regression in
- 34.0.1847.131
- Safari 7.0.2

Signed-off-by: Alexander Shorin <kxepal@apache.org>