Jarv/clean ami

These changes allow for easy creation of a public AMI for when we do configuration releases.
ansible-provision.sh reads a new boolean "edx_internal" that when unchecked will not use the sandbox secret vars or install the xserver.