Add a new section "Cluster Configuration" to the docs

Added a new section that is intended as a how-to for configuring a Bro
cluster (this section does not discuss cluster architecture or theory)
that is aimed at beginners to Bro.  Most of this content was moved here
from the BroControl doc (which is now intended as more of a reference guide
for more experienced users) and the load balancing FAQ on the website.
Merge remote-tracking branch 'origin/master' into topic/dnthayer/ticket1186
Let TLS analyzer fail better when no longer in sync with the data stream. The
version field in each record-layer packet is now re-checked.
Add new features from other branch to the heartbleed-detector (and clean them up).

We should now quite reliably detect scans/attacks, even when encrypted and not succesful.
move tls content types from heartbleed to consts.bro. Seems better to put them there...
Replace errors when parsing x509 certs with weirds (as requested by Seth).

The one I did not replace is a malloc issue which I think really should
raise an error.
Add smtp starttls support
add starttls support for pop3
Add tls flag to smtp.log. Will be set if a connection switched to startls.
Merge remote-tracking branch 'origin/master' into topic/bernhard/even-more-ssl-changes
Implement verification of OCSP replies.

The OpenSSL code to do that is a nightmare.
Minor updates to cluster config docs

Incorporated some feedback from Jeannette, and temporarily removed
the PF_RING ZC section.
Add policy script adding ocsp validation to ssl.log
update baselines & add ocsp leak check
small test update & script fix
Minor update to cluster config docs

Forgot to add one small change in previous commit.
Merge remote-tracking branch 'origin/master' into topic/dnthayer/ticket1186
Update a broctl option name in cluster config doc
Merge remote-tracking branch 'origin/topic/bernhard/even-more-ssl-changes'

Good stuff! (but I admit I didn't look at the OpenSSL code too closely :)

* origin/topic/bernhard/even-more-ssl-changes:
  small test update & script fix
  update baselines & add ocsp leak check
  Add policy script adding ocsp validation to ssl.log
  Implement verification of OCSP replies.
  Add tls flag to smtp.log. Will be set if a connection switched to startls.
  add starttls support for pop3
  Add smtp starttls support
  Replace errors when parsing x509 certs with weirds (as requested by Seth).
  move tls content types from heartbleed to consts.bro. Seems better to put them there...
  Add new features from other branch to the heartbleed-detector (and clean them up).
  Let TLS analyzer fail better when no longer in sync with the data stream. The version field in each record-layer packet is now re-checked.

BIT-1190 #merged

Conflicts:
	testing/btest/Baseline/scripts.policy.misc.dump-events/all-events.log
	testing/btest/Baseline/scripts.policy.misc.dump-events/smtp-events.log
Merge remote-tracking branch 'origin/fastpath'

* origin/fastpath:
  Fix a doc build warning