cxf-rt-security does not work with joda time 2.x

rt security uses joda time 1.6.2. By default the import is limited to [1.6,2). When using a higher version of joda time for other modules this requires to have two versions of joda time running.

rt security seems to work fine with joda time 2.x so we should open the import to [1.6,3).