XML leaf values are not escaped

When serving XML, "unsafe" data e.g. a URL with an `&` in it, the XML response Eve returns is malformed, leading to errors like
```
error on line 1 at column 63381: EntityRef: expecting ';'
```
The problem is that leaf values are not escaped.