user: add User.html_filter_policy()