Clear the session security attributes in a acknowledgment
Change the ack headers before saving them so idempotent provider does
return the same ack as sent before
Less brittle xml test, namespace order is different using java 8 jre