After Preserving User Input

Learnt String substitution. Commit after preserving user input
After learning HTML escaping

Added escape_html and updated the app to include HTML escaping while
retaining form entries