Bug fixes from testing. Mostly around stream disposal timing. Also added error handling for invalid packages on the upload page, and an error recovery page 'UnverifiablePackage' to handle the rare case where you cleverly get an invalid file saved in the uploaded file cache.