When the password contains `&`, login fails, since the password is set in the XML verbatim. Username and password should be XML escaped.
When the password contains
&, login fails, since the password is set in the XML verbatim. Username and password should be XML escaped.