add html headers, escape html in output