New ticket by staff would cause the %{company.name} variable to be
incorrectly replaced as the user's name in email templates.

This happens when upgrading from 1.6, the company information does not yet
exist (neither do the form tables)

Properly escape company name for display

And extend the information to email templates