first take at supporting maec content embedded inside stix documents

now supports maecInstance:MAEC inside a TTP's behavior.

supports issue #57