Fix PIs appearing before text nodes.

The bug:

    <foo>aaa<?pi?>bbb</foo>

is parsed as

    <foo><?pi?>aaabbb</foo>

by loadXML.

Cause and fix:

The SAX handler that's used when you call loadXML didn't append
the text buffer to the current node list before pushing a
processing-instruction node.