improvements to db::escape and html::form