prepared statements and xml valid parameter

LL-5:  Switched from the use of Statements in Database interactions to
PreparedStatements to make use of binding for enhanced security and code
readability.  Since the Schema validation is not being used, the
xmlvalid parameters expected in REST methods was removed and the check
against that parameter commented out.