_includes/social-buttons.html: escape ampersands in URLs so HTMl validates

Or rather, gets closer to validating.