DDF-950: fixed cast exception in SecurityLogger when a signature header is present

Fixed SecurityAssertionStore to look through the WSSecurityEngineResult for the SAMLTokenPrincipal instead of casting the first principal returned.
Also made the PEPAuthorizingInterceptor occur after the PolicyInVerificationInterceptor.