Fixes to SSL certificate generation

Several fixes, including:
 - do not recreate the certificate if it already exists
 - do not change permissions on directories that might be different than
   what we expect (code was assuming it was always
   /etc/<component>/ssl/{certs,private})
 - make private key non-readable by the world
webui: Some fixes related to SSL generation too

This includes:
  - really set insecure to true when generating certificate (it wasn't
    set in the json)
  - also make the path to certificate and key files disabled
webui: Fix string to be consistent

self-signed, instead of auto-signed.
webui: Set xxlarge class on file type inputs

For text input fields that take large amount of data (like a full file +
path), setting input-xxlarge class helps with getting a proper display
when using bootstrap.
Create certificates in the second phase of chef run

Otherwise, the openstack packages are not installed yet, and therefore
the group openstack-<foo> does not exist yet.
no need anymore in keystone here
Fix cinder.conf when using manual driver configuration

The first line of the option was put on the volume_driver line too,
which obviously broke cinder. Adding the empty line in the template
results in what we expect.
Use xxlarge for file inputs

Those tend to be pretty large.
Merge pull request #68 from vuntz/fix-ssl-generate

Fixes to SSL certificate generation
Merge pull request #78 from MirantisDellCrowbar/bug/DCB-147/pebbles/master

For PFS no need anymore in keystone here
Merge pull request #80 from vuntz/fix-manual

Fix cinder.conf when using manual driver configuration
Merge pull request #71 from dirkmueller/release/pebbles/master

Use xxlarge for file inputs