Enforce keystone service endpoint URL for auth

It's needed to guarantee that the same level (public/private/admin) will
be used for tenants/tokens ops inside the savanna client.

Change-Id: I65078be500822c475bceaab5eb55910202304aa3