Merge pull request #21 from dsheets/uri-expander

ensure ampersands in URIs are xml-escaped
test alist and attrs aq expanders with debugging symbols; resolves #18
add attrs aq expander tests