Escape strings in XML being sent to Highrise API