Use r.redirect without arguments for same path
Use escaping by default in views