add firewall cookbook. modify django staging and production roles