Updated POM
Disabling DTD & XXE by default to protect against XXE attacks