removed Mime::XML from the default param parsers in light of the new RoR remote-code-execution vuln