changed to get XML from 'xml' parameter in form post, not directly from body in 'text/xml' post