A demo WS-Trust/SAML SSO system with CXF