Switch `sanitize_text_field` for `esc_html`, fixes #405