Use escape_utils if available, fall-back on CGI.

* Try to load `escape_utils` and gracefully handle missing requirement
* Fall back on CGI.escape_html implementation
* Update README to explain how to use `escape_utils`

[Benchmarks showing 10x-100x improvement](https://gist.github.com/wpeterson/c851be471bd91868716c).