comment out xss checks in ajax_feps_save_property