#403 disabled dtd download by default

SHOULD_VALIDATE_XML_AGAINST_DTD defaults to false. Intended?