fix CAAERS-6307
handle invalid XML & move user/password to properties file