DDF-950: fixed cast exception in SecurityAssertionStore when a signature header is present

Hopefully it'll work correctly this time.