Fix enable/disable of heat_cfg and heat_cloudwatch

This patch modifies the heat_controller.pp manifest such that the
heat_cfn and heat_cloudwatch services are enabled/disabled per the
heat_cfn and heat_cloudwatch boolean parameters. Previously, once
either boolean had been set to true the services would be running on
the controller, but reverting either parameter to false would not
stop/disable the service.

This patch also fixes the call to the heat::keystone::auth class such
that the heat_cfn endpoints are always created with the correct IP
addresses.