Switch erb to escape HTML by default using Erubis

Guard against potential XSS and other nasties by users of Rapid Connect
Merge pull request #12 from ausaccessfed/feature/extra-xss-protection

Escape all variables inserted in HTML by default