No longer assume that IODEF-Document element is the root of payload

It's usually wrapped in an 'item' element. This aligns the IODEF
validator with the Atom validtor.