Add missing escaping

Adds a variety of escaping improvements (mostly to translations) to harden the theme against XSS, XSRF, and other badness.
Just curious, is the type casting necessary here or was that a personal preference thing for you? In general I like it but don't know that it's necessary. Have you done this since `get_comments_number` can be filtered?