added a missing esc_url
Merge pull request #11 from alleyinteractive/escaping-fix

added a missing esc_url