Merge "Fix security check for private allocateAppWidgetId api" into jb-mr1-dev