Make ReplaceSelectionCommand to handle empty SPAN replacement

This patch makes |ReplaceSelectionCommand| to handle empty SPAN replacement.

Before this patch, it crashes at |SimplifyMarkupCommand::doApply()| with
null pointer reference passed by |ReplaceSelectionCommand| with
null |insertNodes.firstNodeInserted()|.

BUG=619131
TEST=run_webkit_unit_tests --gtest_filter=ReplaceSelectionCommandTest.pastingEmptySpan

Review-Url: https://codereview.chromium.org/2122003003
Cr-Commit-Position: refs/heads/master@{#404075}
2 files changed