wraps all options in esc_attr

hopefully resolves #43