fix SoapFault handling to throw proper soap fault to client
added WsSecurityFilter that supports UsernamePassword for now