FIX: Render html (eg. links) in security messages

ContentController.DRAFT_SITE_ACCESS_RESTRICTION includes a link that gets rendered as plaintext. Need to render as HTML.