Breaking change: sanitize on save only

Change the code to sanitize HTML only when saving the field.
Also added Django settings defaults.
Rename sanitize_css to reflect what it actually does
Undo copyright in docs