change getSafeRegion to take an optional boolean argument to include the cb in the calculation or not. Defaults to true (the current semantics for the api call). Works for both html5 and flash

Also changed getSafeRegion to no longer return all zeros when controls false