Me: HTML entities should be handled correctly

[v18]

Here are some areas in /me where we don't display HTML entities in a name correctly:

1. Me > Security > Connected Applications: the Access Scope name
   
2. Me > Security > Connected Applications: the name of the app. In /me the HTML entities are stripped:
   
   Here's what it looks like on https://developer.wordpress.com/apps/ID instead:
   

[hoverduck]

07Apr16 Bug Scrub

I was able to confirm that having text inside < > brackets does not show up in the Connected Apps list, but other special characters seem to be okay (& turned into &). I was unable to get an application to connect with a single-site scope, so that portion remains untested.

[hoverduck]

26May16 Bug Scrub

There hasn't been any activity on this in over a month, so I'm closing. Feel free to re-open if anyone wants