Update xmlapi.php

$authstr and $response where undefined.

Typo fixed, was using $isset instead of isset