better fix for <title> XSS. closes #108