Create roles for apache and shibboleth that run the lms and

support registration and login via apache + mod_wsgi + mod_shib

Note that we now thing that gunicorn and mod_wsgi should not live
on the same machine if they are running the exact same codebase
with the exact same edx logging directories.  This seems to
cause deadlock at random times