Make getting user-domain roles backend independant

There is nothing backend specific in geting the list of roles
for a user-domain, so we should move this function into backends
core.  This also has the affect of now ensuring that the kvs and ldap
support will work, provided the specific backend supports roles on
users and domains.  This is true today for kvs, but support in ldap
for domains is gated by other bugs.

Fixes bug #1131769

Change-Id: Id99accb33fd7cd8d6c37e64e140552c5bfe68349
bug 1133526

modify "expires" to "expires_at", most of the changes were
already done by Guang-yee, added a pki-token-id test

Change-Id: Ib3f39620db18aaea6b0cb5d0ae9c290afd870605
Run keystone server in debug mode.

keystone currently not able be to started in
debug mode because pydev package in
pycharm-debug.egg is removed. Fix is provided
with the correct import statement.

Fixes Bug #1135306

Change-Id: I5588b768a4807b79ae1dabd7550cbee7d2c7505e
Make Keystone return v3 as part of the version api

The keystone "get version" api currently fails to list v3
as a supported api.  It should now do this, along with v2 (which is,
of course, still supported)

Fixes Bug #1148186

Change-Id: Ie88bf941123702d2f7e2ecf6cecb1fa937ca1e52
Merge "Make getting user-domain roles backend independant"
Merge "Make Keystone return v3 as part of the version api"
Merge "bug 1133526"
Merge "Run keystone server in debug mode."