Add recommendations for secure deployments

To deployment doc: Adds recommendations to secure cookies from cross site scripting and mentions how to disable browser autocompletion on the authentication form.

To local_settings.py.example: Adds commented lines showing the CSRF_COOKIE_SECURE and SESSION_COOKIE_SECURE settings and recommending that the lines are uncommented if Horizon is being served through HTTPS.

Change-Id: I0e2516c9c16622561a9b7955aa4b9db87a8410ee
Fixes: bug #1118194
Add X-FRAME_OPTIONS header to protect against Clickjacking

Enables the django.middleware.clickjacking.XFrameOptionsMiddleware
middleware class with the default X-Frame-Options header SAMEORIGIN.
More details here: https://docs.djangoproject.com/en/dev/ref/clickjacking/

Change-Id: Ic06fdf0b79c9cd245c12ed1f4438af9a4b52ad03
Fixes: bug #1118327
Allow image filtering based on image ownership

Uses buttons above the images list to allow filtering into categories:
project, "official", shared, public.

Adds a FixedFilterAction that creates a button group on top of the
datatable. Supports server-side and client-side filtering.

Implements blueprint organised-images-display.

Change-Id: I87f6cf4dd7d7397ad8c23ebadc8bf293d0bad998
If a user only has 1 keypair, this keypair should be selected by default

When Launching a new instance, it's easy to forget to select a keypair
as it's hidden in another tab. This mitigates the issue by selecting a
keypair automatically when there is only one.

Fixes bug #1125124

Change-Id: I04cd6850b4b5f0901d2f9035af8df53cfb67f8c5
Merge "If a user only has 1 keypair, this keypair should be selected by default"
Merge "Allow image filtering based on image ownership"
Merge "Add recommendations for secure deployments"