marking image urls as safe as django is escaping amps needed for s3