response.setCharacterEncoding("utf-8")

replace response.setCharacterEncoding("utf-8") with
response.setContentType("text/xml;charset=utf-8");