a couple of tweaks

removed !@is_collection check - it prevented the ability to create a root listed collection

replace remaining CGI.unescapeHTML call with basic_unescape_html