aws: on-spot & more data passed to started instances

- Security groups setting will not work on 'name' basis inside a VPC so
  now we set list of IDs for spot instances (like was done already for on-demand)
- Enabling possibility to set user_data which is visible to started instance