run tempest tests under tempest user

create a new tempest user for running the tempest test suite under,
and give it sudo access to a few network commands so that we can
attempt to debug neutron failures in the gate by dumping out the
state of things.

Change-Id: I5b6f1363a68656b77cebb2096715279180cc9500