add hiccup for html escaping