Added formal XML parser to secure API

Added UserURI into session to allow non profile users to access ORNG applications
SP to add UserURI to session
Added experimental support for external coauthors crosslinks