use defusedxml

ElementTree is vulnerable to DOS attacks, https://docs.python.org/2/library/xml.html#xml-vulnerabilities.

Fix for issue 83: https://github.com/recurly/recurly-client-python/issues/83