added tenant_present keystone state

added tenant_update to keystone execution module
changed user/tenant looping constructs to return first instead of last match
fixed user_update so that it doesn't blow away settings that aren't passed in as keywords