global: fix "error(html_safe)" flash messages
- FIX Fixes display of flash messages which use "error(html_safe)" context. They were escaped despite the "(html_safe)".
- Adds tests for standard flash message escaping.
Signed-off-by: Nicolas Harraudeau <nicolas.harraudeau@cern.ch>