Use .text instead of .append in setTitle, to prevent rendering title as html

We don't want someone to inject script tags via the title :)