Use `he` for HTML entity escaping

[_he_](http://mths.be/he) is a drop-in replacement for `ent`. `he` has an `escape` method that is more efficient than using `encode` for the use case of connect-oembed.

This patch replaces `ent` with `he`.