Use secureDocumentBuilderFactory instead of the DocumentBuilderFactory

[RusJaI]

Purpose

As per section 2.4 in WSO2 Secure Engineering Guidelines, it requires to use the secure document builder.

DocumentBuilderFactory documentFactory = IdentityUtil.getSecuredDocumentBuilderFactory();

The commit contains the above change.