Sanitize helper only accepts strings

With this patch, `HTML::Sanitizer#sanitize` now raise an `ArgumentError` when called with something else than a String.

```
sanitize(Object.new) # => ArgumentError
```

Previously, it would have failed on `.empty?` and thrown a NoMethodError.

```
sanitize(Object.new) # => NoMethodError
```