Set wsHttpBinding security to <message establishSecurityContext="true"/>