RSS Feeds are broken if you pass the FEAUTH token to the URL

If you pass the FEAUTH token to an RSS URL, it is appended to the <link> element. The &cs=10 parameter is then appended to the URL, but the ampersand is not properly encoded.

This used to work in 1.6.x because the FEAUTH token wouldn't get embedded into the <link>.