diff --git a/parent/pom.xml b/parent/pom.xml
index b04f5cb7..86f2b3b4 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -523,7 +523,7 @@
             <dependency>
                 <groupId>org.apache.ws.security</groupId>
                 <artifactId>wss4j</artifactId>
-                <version>1.5.3.2</version>
+                <version>1.5.4</version>
                 <exclusions>
                     <exclusion>
                         <groupId>axis</groupId>
@@ -600,12 +600,12 @@
             <dependency>
                 <groupId>org.springframework.security</groupId>
                 <artifactId>spring-security-core</artifactId>
-                <version>2.0.1</version>
+                <version>2.0.2</version>
             </dependency>
             <dependency>
                 <groupId>org.springframework.security</groupId>
                 <artifactId>spring-security-core-tiger</artifactId>
-                <version>2.0.1</version>
+                <version>2.0.2</version>
             </dependency>
             <!-- JEE dependencies -->
             <dependency>
diff --git a/pom.xml b/pom.xml
index 98ae37b4..4537ecab 100644
--- a/pom.xml
+++ b/pom.xml
@@ -393,7 +393,7 @@
                                         <artifactItem>
                                             <groupId>org.apache.ws.security</groupId>
                                             <artifactId>wss4j</artifactId>
-                                            <version>1.5.3.2</version>
+                                            <version>1.5.4</version>
                                             <outputDirectory>${project.build.directory}/dependency/wss4j/</outputDirectory>
                                         </artifactItem>
                                         <artifactItem>
@@ -425,7 +425,7 @@
                                         <artifactItem>
                                             <groupId>org.springframework.security</groupId>
                                             <artifactId>spring-security-core</artifactId>
-                                            <version>2.0.1</version>
+                                            <version>2.0.2</version>
                                             <outputDirectory>${project.build.directory}/dependency/spring-security/</outputDirectory>
                                         </artifactItem>
                                         <!--Java EE-->
diff --git a/security/pom.xml b/security/pom.xml
index 2c183051..e87313d4 100644
--- a/security/pom.xml
+++ b/security/pom.xml
@@ -1,4 +1,5 @@
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
     <parent>
         <artifactId>spring-ws-parent</artifactId>
         <groupId>org.springframework.ws</groupId>
@@ -21,11 +22,6 @@
             <name>Spring External Dependencies Repository</name>
             <url>https://springframework.svn.sourceforge.net/svnroot/springframework/repos/repo-ext/</url>
         </repository>
-        <repository>
-            <id>wso2</id>
-            <name>WSO2 Repository</name>
-            <url>http://dist.wso2.org/maven2/</url>
-        </repository>
     </repositories>
     <profiles>
         <profile>
diff --git a/security/src/main/java/org/springframework/ws/soap/security/wss4j/Wss4jHandler.java b/security/src/main/java/org/springframework/ws/soap/security/wss4j/Wss4jHandler.java
index 6872015e..c04fe28b 100644
--- a/security/src/main/java/org/springframework/ws/soap/security/wss4j/Wss4jHandler.java
+++ b/security/src/main/java/org/springframework/ws/soap/security/wss4j/Wss4jHandler.java
@@ -54,7 +54,7 @@ class Wss4jHandler extends WSHandler {
 
     private Crypto securementSignatureCrypto;
 
-    public Wss4jHandler() {
+    Wss4jHandler() {
         // set up default handler properties
         options.setProperty(WSHandlerConstants.MUST_UNDERSTAND, Boolean.toString(true));
         options.setProperty(WSHandlerConstants.ENABLE_SIGNATURE_CONFIRMATION, Boolean.toString(true));
@@ -127,7 +127,7 @@ class Wss4jHandler extends WSHandler {
             }
         }
         else {
-            callback = new WSPasswordCallback("", WSPasswordCallback.UNKNOWN);
+            callback = new WSPasswordCallback(username, WSPasswordCallback.UNKNOWN);
             callback.setPassword(securementPassword);
         }
         return callback;