Obliterate double-escaping; if this is necessary, the other side is doing something wrong

Conflicts:
	lib/xml_security.rb