sanitizing inputs to avoid broken xml when there is an ampersand (or any...

... html entity for that matter) in the fields