Fix/xml escape

partial fixes for #24 

- escape some XML when writing mzXML and mzML
- try to fix the worst offenders
- test for some attributes in mzML
do we expect CVTerms with non xml names?