upload custom.css; updated sanitize to include css

* version bump
fixed sanitizer specs

/cc @anjin need list of css attributes that should be allowed in
custom.css