Use CGI.escape_html vs. EscapeUtils gem

* Swap out implementation
* Drop gem dependency