escape html/xml code inside the json responses - closes #51