Obfuscate credit card nums in <pan> and <alt_pan>

Better regex for obfuscating credit card numbers prevents false
positives, e.g. obfuscating reference number.
Merge pull request #5 from tangentlabs/issue/5/obfuscating_xml

Don't obfuscate datacash references