don't HTML escape csv. Wrap entries in quotes. Fixes #1013