lesson 2: add escape html to lesson2/index