at-mentions

— DT + RW

Comes with a migration to escape existing `comment.body`.

https://www.pivotaltracker.com/story/show/82072770

TODOs
- [ ] get reviews from people
- [ ] fixup into one commit, include tracker# in commit message

might as well.  I'm assuming the life of this model instance is one request and you're calling this thing twice already.