Allow html in email agents, proected by sanitize

The `sanitize` [helper](http://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html) should take of potential malicious tags.

This fixes #450