added xss_escape function to Mojo::Util