external domains is an array for gorouter, add verification key

Gorouter only acceps an array of domains.  Also adding a verification key so that the symetric encryption
with uaa works by default.
Upping staging timeout

Staging without a cache on a slow internet connection takes a while