Strengthen security groups

This locks down the security groups with tighter restrictions and removes all ports that were previously open to the outside world.

Note that without these changes and without manually editing security groups in ec2, storm-deploy is dangerous in that it publicly reveals aws credentials in the web interface over 8080 to the world.