Add a note on Flask automatic escaping

Makes it easier to find.

I my case I was using ``{{ 'selected="selected"' if True }}`` where I should've been using ``{{ 'selected="selected"' | safe if True }}``