HTML encode attribute values by default

This is a fix for https://github.com/NancyFx/Nancy/issues/1282. It's mainly for discussion to see if there's a better way to do this or not.