- added xss support
- created a central service mixin class that supports xss checking, and a centralized validation entry-point