set REQUEST attribute to None, fixes namespace traversal