Define `current_url()` helper to be sanitized by default;

There is a new helper, `raw_current_url()`, which will not santize the output.

Fixes #574.
Merge pull request #619 from f3ndot/issue-574-reflected-xss

[0.9-dev] Fix XSS issues with current_url()