do not use mark_safe in from_db_value

otherwise it unescapes the escaped html tags. instead, we use the safe-filter when rendering

closes #173 (closed)

ping @andrea.poersch