Fix rss title

My bad, last escape() function actually unescaped instead of escaped string (CDATA meant it didn't care)

Also escape title as reported by #8