fix(highlight): ng-bind-html-unsafe is not available in 1.2+

Changed demo html from ng-bind-html-unsafe to ng-bind-html, Filter now returns trusted html using $sce provided by angular