bug fix: ampersand now escaped