use Html helper to escape url