openstack-demo-install: avoid a libvirtd SELinux bug on RHEL 6.4

On some versions of libvirt shipped with RHEL 6.4,
the cgroup service needs to be started _before_ libvirtd,
so that libvirt applies SELinux labels correctly to VM images.