Escape special html characters in json responses