need xmlescape  for password
Merge pull request #151 from hamano/2.1.x

need xmlescape for password