Fixes to SSL certificate generation

Several fixes, including:
 - do not recreate the certificate if it already exists
 - do not change permissions on directories that might be different than
   what we expect (code was assuming it was always
   /etc/<component>/ssl/{certs,private})
 - make private key non-readable by the world
webui: Some fixes related to SSL generation too

This includes:
  - really set insecure to true when generating certificate (it wasn't
    set in the json)
  - also make the path to certificate and key files disabled
webui: Fix string to be consistent

self-signed, instead of auto-signed.
webui: Set xxlarge class on file type inputs

For text input fields that take large amount of data (like a full file +
path), setting input-xxlarge class helps with getting a proper display
when using bootstrap.
Create certificates in the second phase of chef run

Otherwise, the openstack packages are not installed yet, and therefore
the group openstack-<foo> does not exist yet.
Merge pull request #122 from vuntz/fix-ssl-generate

Fixes to SSL certificate generation