Use XML serialization for authorization to support u/p with XML entities.