Format: Update Vimeo embed code.

New code is iframe; and is html5.
Can we be careful about $ID not being an xss vector. What's the regex on those characters?