proper html escaping of doi