attempts to filter out invalid XML characters during user save