Federated security in webservices across trusted domains