Apache XML Security Update to 1.5.4

Signed-off-by: Dominik Schadow <dominikschadow@googlemail.com>