Make XMLRPC server safe from XML attacks

- No entity expansions
- No gzip bombs
- No entity references
Workaround defusedxml 2.6 error reporting
Merge pull request #34 from davidfischer/defuse-xml-bombs

Make XMLRPC server safe from XML attacks