moved wsse authentication to query-function to support dynamic credentials