escape backslashes and quotation marks in strings in the HTML output of the REST servlet