Check user input in XML responses.

Fixes bug 1183884.

* swift/account/server.py: Escape account name in XML listings.

Change-Id: I7ba54631ed1349516132c00a53fae74f0b84ac37