escape apostrophes in xml