Release candidate bug fixes to firewall, metadata

Fixed firewall rules to allow public access to all public APIs.
Added firewall rules for puppet services.

Fixed connection between quantum metadata and nova metadata.