[#30] fix source code display

- An upgrade to angular removed ng-bind-html-unsafe. The solution is to use the
  ng-sanitize module, and pass $sce to the controller that displays HTML in
  order to call $sce.trustAsHtml() on the returned source code view.

Fixes #30