Two bug fixes to correctly handle XML special characters:
Two bug fixes to correctly handle XML special characters:

1. Add a missing ; in the ampersand replacement
2. Add some more unescape() calls

christopherwharrop/rocoto,christopherwharrop/rocoto