http-binding and ws-security

[Johannes Elsinghorst]

Hi,
can someone post a basic example of how to configure an http-provider-bc
with ws-security?
In the documentation i only find this:

<http:policies>
    <soap:ws-addressing />
    <!-- Enable ws-sec with UsernameToken -->
    <soap:ws-security receiveAction="UsernameToken" />
</http:policies>


My Question is where to put username and password.

thanks, Johannes