further steps with WS-Security (signing)