add missing xml-api dep in web app