fixed security group list in run_instances and improved flexibility in authorize_security_group_ingress