enable HTML escaping in mustache templates