xmlProtection now only scans requests that can have a body like POST, PUT and it only scans it if the Content-Type has xml in it.
Made check against xml Content-Type safe against casing. We need that bit of security for the xmlProtection that is based on that.
Changes for #158
Merge branch 'master' of https://github.com/membrane/service-proxy