Fix XSS Vulnerability on Responses Row and Modal

[zgary]

No description provided.

[johnyu95]

@g-zhou, I made some additional changes.

• Changed the format of row_html_id and modal_html_id. There was an additional row- prefix so the ID looked like row-row-1 before. Now it will be response-row-1 and response-modal-body-1. response-modal- is being used as the ID for the entire modal element so there was a chance that it would conflict which is why I used response-modal-body- instead.
• There was one typo in modal_body/notes.html that was still using html_id so I changed that to modal_html_id.
• In the script section of notes.html added an if statement to check for edit permissions. That part uses a textarea instead of a regular div so we need to target note-{{ response.id }} instead of modal_html_id.

Can you take a look at my commit and if everything looks good then you can merge.