Improved custom CSS handling

Disabled Hogan's HTML escaping and the save-on-enter functionality from
custom CSS.  This commit also forces the 1000 character limit from the
JS side.

Thanks @Kuba for noticing!