Filter all embed-data from non-http URL:s

To avoid simple XSS through ”javascript:” links

Fixes #8
Test that both source & h-entry URLs are preserved
More rigid migration script for fixing URL:s
Increasing version number