> Another tip: a very easy-to-make and hard-to-diagnose mistake 
> is forgetting to specify tunnel="yes" on the param statements 

You can reduce the risk by getting into the habit of specifying
required="yes" on all parameters unless you really want them to be optional.

Michael Kay
http://www.saxonica.com/