Updates to API error checking, reporting

* Updates to API error checking and reporting to make it possible to
  report error conditions back to the user (though in production we'll
  generally not want to burden them with this information.)
* CSS and javascript fixes to reflect same.
* Beginning of HTML escaping of prompts introduced, but that part is
  incomplete as yet.
WIP
WIP: TIM-25/working rubric parsing