Only call html_safe on flash message that responds to it

Created by: januszm

This one line change is already covered by existing feature specs.

Resolves: https://github.com/thoughtbot/administrate/issues/2009