﻿ /users/user[username/text()='username' and password/text()='password']/realname/text()