Bulletproofed all activity lifecycle calls

(activities will not corrupt framework state by throwing exceptions from onXXX methods)

This commit also fixes the Simple[DnD]Panel so you can cleanly close parts that they contain.
Removing picketlink as a built-in dependency; projects should explicitly include it if they want PL
Merge remote-tracking branch 'upstream/0.5.x' into 0.5.x