fix overzealous escaping, closes #4

only html-escape unsafe strings during interpolating if the html-safe
values are all strings (numbers are html-safe, but we don't care)
version bump