Null-check for process-instance ID prior to creating URL (task-var)
Added warning to docs about tomcat and forward-slash protection