[Runtime] Add CSP parsing handler for manifest.json

The CSP information will be parsed and stored in ApplicationData so that
other components can use the structured information instead of the raw
data from manifest.json.

The specification can refer to the W3C Content Security Policy 1.0 spec:
https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-1.0-specification.html
Prepare ApplicationService for multiple applications handling.

Prepare ApplicationService for multiple applications handling: ApplicationService now owns a ScopedVector of Applications.
Application::Observer class is introduced so that application can notify about its termination and deletion.
Application::Launch methods return a pointer to the corresponding Application instance, ApplicationSystem methods are modified accordingly.
Merge pull request #1388 from pozdnyakov/Prepare_for_multi_app

Prepare ApplicationService for multiple applications handling.
Merge pull request #1338 from takethathe/csp

[Runtime] Add CSP parsing handler for manifest.json
Roll chromium-crosswalk to 8baebce.

8baebce [SysApps] Add MEDIA_EXPORT to fix linking errors in the component build
Merge pull request #1419 from nagineni/deps_xwalk

Roll chromium-crosswalk to 8baebce.
Bump version to 4.32.61.0
Merge branch 'master' of github.com-crosswalk:crosswalk-project/crosswalk
[Android] Clean term AwContent in IO thread Client and remove AwURLRequestJobFactory in cookie_manager.h.

  In io thread client related header files, the AwContents comments should be refined
and in the cookie manager header file, unused code of AwURLRequestJobFactory should be removed.
This fix is to resolve these issues.

BUG=https://crosswalk-project.org/jira/browse/XWALK-768
[Android] Refactor the xwalk settings.

  The native layer of xwalk settings interfaces of updating everything
should grab lock, the constructor should directly initialize the base
class not to involve the member of base class. The unused codes in java
 layer of xwalk settings should be removed and the ui thread should be
handled correctly. This fix is to refactor the xwalk settings to resovle
these issues.

BUG=https://crosswalk-project.org/jira/browse/XWALK-767
Merge pull request #1406 from ShDavidliu/refine

[Android] Clean term AwContent in IO thread Client and remove AwURLRequestJobFactory in cookie_manager.h.
Merge pull request #1405 from ShDavidliu/refactor_settings

[Android] Refactor the xwalk settings.
Mac build fix

Fix compiler errors about missing "virtual" and "OVERRIDE" on overloaded
methods.
Merge pull request #1422 from tmpsantos/mac-buildfix

Mac build fix
Bump version to 4.32.62.0
[Runtime] Add CSP supporting for Crosswalk scheme

The CSP control will be enabled in packaged application by adding the
CSP content into the Crosswalk scheme response header.

The CSP policy is coming from "content_security_policy" field in
manifest.json, so web application developer could configure it as they
want.

https://crosswalk-project.org/jira/browse/XWALK-630
[Runtime] Disable the default CSP policy

Remove the default CSP policy: script-src 'self'; object-src 'self',
since it will block many tests and applications.
[SysApps][Android] Add permission to app template for Contact API

BUG=https://crosswalk-project.org/jira/browse/XWALK-778
Merge pull request #1424 from deqing/add_permission

[SysApps][Android] Add permission to app template for Contacts API
Application extensions support multiple applications

Application extensions are now provided with corresponding Application instances.
The corresponding application instance is found by Render Process Host (RPH) associated with it
(There's one-to-one correspondence between Application and RPH, obtained from its "runtimes").

RPH id getter is added to Application class. ApplicationService can lookup an application by the RPH id.
The rest of changes in the Application class (and all changes in Runtime class) are caused by the necessity for the application
to be aware of the associated RPH id before its first "Runtime" loads anything.