Securing Web Services with Apache CXF