Fix redirection of non-SSL to SSL website when using HA

We need to use the correct port for redirecting (instead of leaving the
non-ssl port), and we need to leave the /server-status page unredirected
(since it's used by pacemaker
(cherry picked from commit c3986ad743e1c2f655f4cd671003bee5c0c65b05)
Avoid races with HA on "python manage.py syncdb"

We didn't have any synchronization for it because this is run in a
notification. But it's actually easy to force a synchronization there
too, by putting the template creating the notification as part of the sync.
(cherry picked from commit e059933162ae0c0bab2614ffcf2b2bc34f46fee7)
Configure horizon before configuring the vhost for horizon in apache

This sounds much safer, and I believe it actually prevents a bug where,
sometimes, static files are not being generated by horizon when using HA
(likely because haproxy is opening a connection to apache and the
not-yet-configured horizon, which could be what is breaking things).
(cherry picked from commit d4234b7c85c2a56b2f5d8ae4cc5a287ffe4541a5)

Conflicts:
	chef/cookbooks/nova_dashboard/recipes/server.rb
Fix apache with HA not running until second chef-client run

It doesn't work on first run because we don't have yet the proper
attributes set when creating the pacemaker resource.
(cherry picked from commit a1f3452e336cdd45ec5f6394fbe23a71afb6fbbf)
Tell pacemaker to start apache with -DSSL when apache needs SSL

This is a transplant / backport of
https://github.com/crowbar/barclamp-pacemaker/pull/138

commit f4127d011f0c3c31545cdec3998b80a5b188aac3

in barclamp-pacemaker.
Merge pull request #184 from bkutil/ha_backports

Ha backports