Add missing escaping

Adds a variety of escaping improvements (mostly to translations) to harden the theme against XSS, XSRF, and other badness.
Yep - since it can be filtered, there is an off-chance that what comes back is not actually an int - this explicitly enforces forces it.