Fixed the usage of /etc/default/logstash-forwarder. The previous way did...

Because DEAMON_ARGS was embedded into the COMMAND variable, setting DEAMON_ARGS in /etc/default/logstash-forwarder did not overwrite the used variable.