Collada Export: escape user-defined strings in XML output.

Manual XML escaping in the collada exporter. Ugly, but not much of a choice here. I'm escaping at the very last (i.e. when writing actual XML) to avoid mistakes.

@Schrompf Good to go?