fixed autoescape issue on friends page