Output admin header as html_safe string

Rails 2 outputs strings in views as-is, but Rails 3 escapes them by
default. We need to make them html safe strings to keep rails from
escaping them.