Update select2 plugin

This new version comes with the option to scape markup, avoiding script injection.