bug fix: ampersand is now escaped in method to_xml