Quote ampersend chars in XML text. Closes #263.

Includes testcase.