use .text() not .html() in stream rule editor to prevent DOM XSS

fixes #543
almost complete quickvalues widget. #473
more work on quickvalues widget. #473
Merge git://github.com/Graylog2/graylog2-web-interface into develop