Allow span elements through HTML validation

This loosens the rules around HTML sanitisation and validation to allow span
elements. This is required for some work happening on whitehall to precompute
and store govspeak on HtmlAttachments - the computed HTML contains spans for
numbered headings.