Sure up HTML escaping in Rack::Directory

 * Supersedes & closes #522