Update safe urls

Same bug as fusionbox/django-widgy#212