ampersand was incorrectly decoded when passed in ticket.xml via string parameter to applet