Fixing arbitrary HTML user input vulnerability in message body. Since the revert back from using the richtext widget a few weeks ago html went unchecked into the message body.
Trimming off any lingering CR (\r) line terminators before appending CRLF (\r\n). build_mime_message was leaving extra CRs around, causing some havoc for certain mail servers and clients when running with SMTP.