fix html.escape escaping quote-characters

for html.escape, the parameter quote defaults to True, whereas is defaulted to False for cgi.escape