CXF-5030 Move xmlsec and change start level to make sure it is loaded first

git-svn-id: https://svn.apache.org/repos/asf/cxf/branches/2.7.x-fixes@1485617 13f79535-47bb-0310-9956-ffa450edef68