Update SecurityGroup instance fetching to use filters; Fixes VPC instance issue

This pull request merges #1665 from @arturhoo which does the following:

 * Switch to using filters to fetch a SecurityGroup's instances
 * Makes sure to fetch instances in a VPC correctly
 * Add a unit test to show this doesn't break existing functionality (added by @danielgtaylor)

@toastdriven please review.