[tokenizer] started adding support for HTML entities

TODO: so far, only numeric entities are decoded