fix reply handling


@jancborchardt @jakobsack @Gomez please test and review - THX
Just as a reminder: `t()` is not sanitized, that would be a breaking change which I'm aiming for ownCloud 8 (see https://github.com/owncloud/core/issues/9046). - I'd manually escape every value until then.