Fix several XSS vulnerabilities

In both the client and staff interfaces, where the URL and request
parameters were echo'd back without any escaping
Fix XSS vulnerability in phone number field
Merge pull request #1025 from greezybacon/issue/various-xss-18

Fix various XSS vulnerabilities

Reviewed-By: Peter Rotich <peter@osticket.com>