Added MFL code to page header. Service methods for getting defalut location and code now use proxy privileges so that they can be called
in un-authenticated session