Fixed a security issue with markup safe being turned off for flash messages