replace deprecated clean_url() with esc_url()

see http://codex.wordpress.org/Function_Reference/clean_url