removed credentials_from_context feature: session auth is enough, that was code complexity for no benefit anymore. Also cleaned report WS and make sure it passes the context
Merge branch 'drop-credentials_from_args' into jsonrpc2
makes it possible to force xml_rpc for backward compatibility (force_xml_rpc option in config)
implemented search_read; TODO: make it optional