re-enable html rendering

disabled web.py sanitisation