need xmlescape  for password
Merge pull request #151 from hamano/2.1.x

need xmlescape for password
Merge remote-tracking branch 'upstream/2.1.x' into 2.1.x