error messages in error alert can now contain HTML