Add utility to create a org.xml.sax.XMLReader

[snicoll]

With XMLReaderFactory.createXMLReader() being deprecated we have a number of places where we need to create an XMLReader. Abstracting that to avoid the repetition would be good.