fixed: escaping tel and email attributes in users list