Disabled websecurity in config.xml to allow XML requests