enable HTML escaping in mustache templates

This should fix issue #91