call /l_unsafe instead of /l

mason is instanced with default_escape_flags=>'h', so the output of $m->scomp('/Elements/ShowUser', User => $u) is escaped by /l component