#17: Use flask.Marked() to pass HTML-escaped text into flash messages