escape apostrophes in the html