preparing to tag 3.6.1 with xml security fix and improvements to report