escape values in hidden formtool fields