no longer forcing submitted values to be html encoded. This should be a choice by the developer on how to handle user input