added html escaping helper
added user info to layout