Update README.md to reflect what's in Rails 4.2

- Rails Html Sanitizer is not the default, this gem is.
- Explain when this gem is no longer the default.
- Add Rails 5 information.