autoLink helper escapes HTML