Automatic escaping is off

Hi, looking at the code I found you use templates with `.jinja2` extension. The caveat is that Flask turns on autoescaping in Jinja [only for files with couple extensions](https://github.com/pallets/flask/blob/1.1.x/src/flask/app.py#L809) and `.jinja2` is not one of them.