Added stored XSS sample
Added context.xml with deactivated session cookie protection