Corrected to avoid generating <soap:Header/> container when self.security.toXML() returns blank string