This week's book giveaway is in the OCAJP 8 forum. We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line! See this thread for details.
That depends on your definition of "complete" - everyone has his own concept of how much security is sufficient.
For WS, there is the WS-Security standard, for which an open source implementation is available in the form of WSS4J. WS-Security addresses authentication (by username/password and client certificates), as well as encryption. You can find links to the standard and the software in the WS FAQ.