Check user input in XML responses.

Fixes bug 1183884.

* swift/account/server.py: Escape account name in XML listings.

Change-Id: I33f25aa02c96a72cb54c9d7ebd916d06a8a69edf