Add NAT hole to reach mongohq.
Add a rule for the rabbitmq admin window.
Remove the admin window ports.

Since everything is behind the nat, the rabbit boxes don't have public IPs so
adding a hole to the nat for this doesn't make sense.  They are't reachable
from the outside world.
Allow unhindered communication within the rabbit server cluster.
Fix rabbit security groups and add Bastion access to the admin web app.
Merge pull request #130 from edx/feanil/cloudformation_update

Add NAT hole to reach mongohq.