Add skeleton of badge claim page
Prevent XSS in claim page; fix on Django 1.4 and 3.x