Use Rack::Utils to do some HTML escaping