Update xmlsec to v1.5.5
Configure an AllowAllCredentialsMatcher to avoid an
IncorrectCredentialsException.