Add HTML decode utility

for uses including processing escaped HTML responses to XHR requests