updated express-hbs to 0.7.10
escapes meta title/description

closes #2663
adds unit-test