Microsoft backs XML security spec