MTurk ExternalQuestion should XML-escape the URL parameter

Without XML-escaping the URL parameter, the external URL can't contain an ampersand which occurs when there are multiple parameters in the query string.