Fix/xml escape

partial fixes for #24 

- escape some XML when writing mzXML and mzML
- try to fix the worst offenders
- test for some attributes in mzML
then we should keep @hroest solution, +1 for merge