we first shall check if the current session is valid - otherwise the session-id will be regenerated on login via basic auth
fixing ident
Disable XML entities when parsing XML