Add /xml/schema to the API whitelist