fix sanitize_html to write out HTML instead of repr for #160