ensured resolved macro references are removed from output

in the process, ensured that multiple macros are supported
added macro whitelist checking

opted not to check for existence of macro, since wrong references would
have to be present in both the whitelist and the target tiddler - plus
at worst this results in a 404