better form validation and remove manual cors headers because a separate plugin will take care of that
remove unneeded middleware, add CORS plugin and re-add applyXSL processor, although its still broken
start fixing applyXSL by adding a switch for the JAVA xslt transformation that nicolas added, re-adding the lxml one for my processors. still broken though.