we\'re trying to configure our datapower xi50 to protect a login page from an reflective xss injection. We\'re enabled the protection thorugh the name-value area, configured