Ship with rails-html-sanitizer instead.

Should have 4.2.0 label (I don't have access).

cc @chancancode @rafaelfranca 
Keep this here, we need to test if when it is added to the gemfile it will work.