Fixes 18 - basic WSSE UsernameToken support for incoming messages currently assumes encoded passwords