XSSFilter changes - allow multiple reads from a request