Escape HTML in !tour getusers