Client side APIs redo, 20140925-2
 - test scripts changes
Avoid XML XXE attack, from David Jorm