- add EscapeHTMLResponseWriter that wraps an http.ResponseWriter with an
escaping one
- add EscapeHTML; a wrapper that uses EscapeHTMLResponseWriter to escape
the bytes written from the next http.Handler