use swift-setup role for password generation

- single node should run swift-setup (die if multiple)
- node(s) running swift-proxy will grab  the password off the node running swift-setup

This ensures there are no race conditions in becoming the password setter/owner, and removes all db/password generation out of the proxy role which may be run in many places