fix leaking globals

Functions and Utilities are leaked by xpath.js which is required by passport-saml, I've got a PR in at yaronn/xpath.js#5 to fix them.