No need to escape XML, proxy does this for us at the moment. cf https://github.com/zendesk/freshbooks_app/pull/1