Escape user input

This change causes all breadcrumb text to be untrusted by default (unless it's a SafeBuffer).

This resolves PR #42, but in a different way instead of passing a new option, it allows you to pass a SafeBuffer.

This is necessary to prevent XSS attacks when adding user-supplied input in the breadcrumb.