switched 'allowHTML' default to false