Security fix for #379. Filter output field values from submissions.

There is a possible security issue when viewing submissions in the
 admin area. If another admin user edits a submission, they can
edit the field values with malicious Javascript etc.
Merge pull request #380 from carlowens/develop

Security fix for #379. Filter output field values from submissions.