Sanitize HTML with new sanitizer for old data (fixes escaped ampersands)

This is primarily a migration, and there is currently at least one other outstanding PR with a migration, so please ensure that the migrations make an unbroken chain before accepting.