Fix namespace issue for SecurityTokenReference tag

This is small fix for the case, when namespace for `<Security>` tag namespace prefix differs from gem's default `o` (e.g. `wsse`), the `<SecurityTokenReference>` tag and its children namespace prefix remained the same `o`, it causes message validity to fail on some strict checkers.