Add Permissions to manifest (required for webstart)

Also added Codebase (currently * allows running from anaywhere) and Application-Name (displayed in the webstart dialog, instead of the user-unfriendly classname)
Change signjar task to apply/exec jarsigner with custom args

The ant signjar task doesn't support -storepass:file.
Note this no longer preserves the original file modification time.
Replace jarsign.storepass property with jarsign.storepassfile

Added default password file lib/keystore.passwd
Replace genkey task with exec keytool -genkey

Need to use -storepass:file
Add jarsigner timestamping
Set default timestamping authority to http://time.certum.pl
Use old/new taks depending on whether jarsign.storepassfile is set

Restore old signjar/genkey tasks for Java<1.7
Use the new exec invocation with -storepass:file only if property jarsign.storepassfile is explcitly set
Revert "Replace jarsign.storepass property with jarsign.storepassfile"

This reverts commit 94b0f13505aee0e061d374a65b1b63d55da4e0b2.
Add commented out note about jarsign.storepassfile
Add tsaurl to old signjar tasks
Move jarsign into a new macrodef, echo jar name when signing
Replace all jar-signing calls with a conditional macrodef

Takes care of checking whether jarsign.storepassfile and/or jarsign.tsa are set.
Don't set jarsign.tsa (timestamping disabled by default)
merge develop -D org -I include -E exclude: PR 1956 (Login button)
merge develop -D org -I include -E exclude: PR 1960 (Remove cut link 11882)
merge develop -D org -I include -E exclude: PR 2005 (assist #11091: refactor server DB queries for hierarchy navigation)
merge develop -D org -I include -E exclude: PR 2051 (Login redirects #hash. See #11957)
merge develop -D org -I include -E exclude: PR 2072 (User menu display)
merge develop -D org -I include -E exclude: PR 2090 (Use Pillow instead of PIL (rebased onto develop))
merge develop -D org -I include -E exclude: PR 2091 (ExporterI: set tile size for exported files to 128x128 (rebased onto develop))