htmlutils: improve remove_html_markup() function

• Adds an optional boolean argument to the remove_html_makrup() function, which controls whether unescaped characters like '&', '<', '>' and '"' are also removed. (closes #895)

• Adds a new function to htmlutils called unescape() as the opposite of the cgi.escape() function.