Add tests for html_safe handling/escaping

* Introduces mocha as a dev dependency
* Verify `html_safe?` checking/escaping
* Verify output marked `html_safe`