What is the difference in security and performance wise for applications developed using xml/java versus html/java