add wss4j support to apply ws-security