revise escaping position

#### What's this PR do?
Previously, our incorporation of the `entities.decode()` call broke our donations flow. This was happening because the `entities.decode()` call was itself breaking down the API data into a quasi-JSON object made up of strings. 

Now, we simply `JSON.parse()` the entire API response, and then we call `entities.decode()` on each of the donations model properties (which are all strings) before they're attached to the mobile commons profile. 

#### How should this be manually tested?
Tested using the POSTMAN donations flow. Donations flow successfully run with both testing and production environments. Also tested by querying specifically for the "Young Women's Leadership School" in Brooklyn. Unescaped, the apostrophe remains **&#039;s**, escaped, the apostrophe returns. 

#### What are the relevant tickets?
JIRA SMS-95. 
semicolon :smiley_cat: