sanitizing inputs to avoid broken xml when there is an ampersand (or any html entity for that matter) in the fields