Change from using JBoss IDTrust to PicketBox

JBoss IDTrust is obsolete and has been replaced by PicketBox. Change the places where we're using IDTrust for JAAS implementation (just for testing purposes), and use PicketBox instead. (Hopefully the dependencies are much better, too.)

This shouldn't affect consumers of ModeShape, since IDTrust is only used for testing purposes.