[api] Added auth options to ApplicationSetting.to_xml