Update boilerplates/default/templates/_header.mustache

Default hrefs should be unescaped.
Otherwise you end up with crazy shit like `href="&#x2F;about"`