add google-caja
whitelist html sanitization from caja

we don't need most of it, so don't include it
fab update (google-caja-5669)
Merge pull request #18 from minrk/caja

add google-caja for HTML sanitization