now intercepts paste events

paste events are intercepted and any markup removed. The resulting text
is checked against regexes. Of note <a> tags are not removed because
of selection issues.