Added utf-8 header, removed unneeded constant

*Added `content: text/html; charset=utf-8` to root endpoint(main.html) handler
*Removed uneeded constant (KEEP_SAFE), since now everything is
injection-safe (hopefully)

	modified:   app.py