concerned about security, reverting html email to be espcaped on display here