disable HTML escaping during vCard import

not sure why they do that? &, < and > should be escaped in UI, which
also seems to happen fine.... it is not very nice to escape that in DB
already.