Fix #1649

This fixes the test for #1649. I don't believe the escaping is necessary on the href attribute, because the URL is coming from a trusted source.
I'm not sure... Prior to this change (in `urlize_quoted_links`), `smart_urlquote` is called on the URL, which seems all that is necessary. Do the `rest_framework.renderers` do similar escaping?