security-config_4_1.xsd module-option is required, should be optional

The security-config_4_1.xsd requires a module-option due to the lack of a minOccurs="0" for the jaas:module-option reference from the login-module. This should be added.