remove html chars for " and '