use autoescape in settings for Jinja2