Escape common HTML characters

However, there is an option for not escaping interpolation by suffixing
with the variable name with HTML like this:

    "key": "this will not escape __nameHTML___"
Add config var for escaping interpolation
Add one more spec to add clarity of purpose
release 1.6.1