Fix a race condition in agents status update code

Code handling agents status updates coming via RPC checks,
if a corresponding entry for the given (agent_type, host)
pair already exists in DB and updates it. And if it doesn't
exist, a new entry is created.

Without a unique constraint this can cause a race condition
resulting in adding of two agent entries having the same value
of (agent_type, host) pair.

Note, that it's already not allowed to have multiple agents of
the same type having the same host value, but currently it's
enforced only at code level, not at DB schema level, which
effectively makes race conditions possible.

Closes-Bug: #1254246

Change-Id: I1ebaa111154b3d6b34074705b579097ab730594c
Updated from global requirements

Change-Id: Iec62e381c079d1a71bd5d49f09cf71f6f4f68f72
move rpc_setup to the last step of __init__

rpc setup should be the last stuff in agent initialization
so that the rcp message handler(the agent instance itself)
can have a fully initialized agent instance.

Change-Id: I58c966e2c8ee92c307b565932e867b5d1ec73b67
Closes-Bug: #1259088
Add X-Tenant-ID to metadata request

Previously, one could update a port's device_id to be that of
another tenant's instance_id and then be able to retrieve that
instance's metadata. In order to prevent this X-Tenant-ID is now
passed in the metadata request to nova and nova then checks that
X-Tenant-ID also matches the tenant_id for the instance against it's
database to ensure it's not being spoofed.

DocImpact - When upgrading OpenStack nova and neturon, neutron
            should be updated first (and neutron-metadata-agent
            restarted before nova is upgraded) in order to minimize
            downtime. This is because there is also a patch to nova
            which has checks X-Tenant-ID against it's database
            therefore neutron-metadata-agent needs to pass that
            before nova is upgraded for metadata to work.

Change-Id: I2b8fa2f561a7f2914608e68133abf15efa95015a
Closes-Bug: #1235450
Merge "Fix a race condition in agents status update code"
Merge "move rpc_setup to the last step of __init__"
Merge "Add X-Tenant-ID to metadata request"
Merge "Updated from global requirements"
Created skeleton of OVSFirewallDriver
OVS firewall: loaded physical and integration bridges
deferred/undeferred actions of OVS bridges
got base flows working: no ip, only arp
add icmp test flows as rules
basic security groups parsed
refactored arp flows
refactored arp flows #2
Added new security group api directions. requires db modification

ALTER TABLE securitygrouprules MODIFY COLUMN direction ENUM('ingress','egress', 'ingress-src', 'egress-src');
added proper source_port_range_min, source_port_range_max to rpc api
Allow for deferred flows; although not 100% fixed

neutron-rootwrap-xen-dom0 has issues with stdin