allow xmlvalidate from post