Escape search term to prevent XSS.

I believe this should only affect how we render the search term in the
UI. It will escape characters so we can ensure we don't execute any
XSS-type attacks.
Merge pull request #106 from crits/search_xss

Escape search term to prevent XSS.
Allow for custom service runtime forms.

Runtime forms were always based on the configuration options provided
for the Control Panel. This change allows you to fully customize the
service runtime form, including having your own template so you can
include javascript and such to make the form more interactive.

If you wish to leverage this capability, your service now needs to have
a "generate_runtime_form()" which should take the following as
arguments:

- self
- analyst
- name
- crits_type
- identifier

You don't need to use any of that information if it's not necessary, but
it will be passed along by services (for the time being). This function
needs to return two things:

- a Django form object
- HTML of the rendered form

The former can be None if there is no Django-style form to generate. The
latter should be the rendered HTML form (you can use render_to_string()
with your own custom form template). If you want your own template,
create it in the "templates" directory of your service, give it a unique
name, and reference it appropriately in your function.
Remove comment that is OBE.
Merge remote-tracking branch 'origin/custom_runtime_forms' into distributed_services