rename html file uploads filenames to prevent xss scripting

html / htm file extensions should not be considered safe. We also also ensure that the filename does not have a dot "fileExtension" in the middle of the string since apache will use that file extension handler

We do not rename if user has administer CiviCRM / access CiviMail since those users might want to preserve the filename when they use it as an attachment etc