SecureConversationTokenFinderInterceptor stores the wrong token identifier

The SecureConversationTokenFinderInterceptor in CXF has this line:

message.getExchange().put(SecurityConstants.TOKEN_ID, tok.getID());

but it also stores the token like so:

SecurityToken token = new SecurityToken(sct.getIdentifier(), created, expires);

Then in AbstractBindingBuilder.getSecurityToken() it tries to find the token in the token store using SecurityConstants.TOKEN_ID, and an error of "No signature token id" is thrown. The SecureConversationTokenFinderInterceptor should store the Identifier of the SCT instead (getIdentifier, not getIDI()).