Added escape urls for news and users (media objects)

A fix for issue #650