fixes #5471 html escape auto-completer values (CVE-2014-0208)

(cherry picked from commit ee672544f1ad5990ca0e39acd86f83cbbe06ebe9)
i18n - extracting new, updating rails, pulling from tx
templates - sync from community-templates

(cherry picked from commit 17c95ca8d6ac63514011cfee6137011002f57286)