Port range support in the firewaller.

The firewaller watches the openedPorts collection, the ports field on units is no longer updated.

This work fixes https://bugs.launchpad.net/juju-core/+bug/1337817
so this looks like a complete failure to even get an authorizer, which STM to be one of the occasions when it's the api server that's failing rather than the specific request failing...