skip DTD validation

http://stackoverflow.com/questions/243728/how-to-disable-dtd-at-runtime-in-javas-xpath