identity: don't specify API version in {public,admin}_endpoint

{public,admin}_endpoint parameters are used for service discovery in
Keystone API. They should not contain the API version otherwise that
would lead to an URL like this:
<link href="https://os-ci-vip.ring.enovance.com:5000/v2.0/v2.0/" rel="self"/>
puppet-keystone: update refs

Update the refs to have a fix for {public,admin}_endpoint parameter.
Note: it mays be the last commit before switching to Juno.
orchestration: switch deferred_auth_method to 'password'

Before, 'trusts' was set by default but it requires Keystone API v3.
Since we are still working on Icehouse, let's use 'password' which
supports Keystone API v2.
Merge pull request #719 from enovance/key-url

identity: don't specify API version in {public,admin}_endpoint
Merge pull request #720 from enovance/fix-deferred_auth_method

orchestration: switch deferred_auth_method to 'password'
Advanced Firewalling feature

This patch enables Firewalling in this Puppet modules in a flexible way.

* Enable firewalling optionnaly (disabled by default).
* Enable 'pre' firewalling with defaults rules.
* Enable 'post' firewalling with DROP rule, with a debug option to
  disable it.
* Enable default rules for all services (OpenStack, etc).
* Ability to add custom firewall rules with Hiera
* Update puppetlabs-firewall refs
* Refactorize unit-tests