Remove usage of admin_token

* Added new tenant/project: services
* Added two new users with admin roles to 'services' project:
  ostf and nailgun
* Use generated passwords for ostf and nailgun keystone users and
  remove admin_token
* OSTF and nailgun will use their users to validate keystone tokens
  instead of admin_token
* Added new services and endpoints for keystone, ostf, nailgun. Now
  it's possible to use keystone service catalog to discover their URLs

DocImpact
Implements: blueprint access-control-master-node-improvments
Depends: Ibe3844da784656f02673c32c2f98cb67bbdb3e89

Change-Id: I9860257b1b392be31de8ff9e09b95e9a3c6ba3f7
Merge "Remove usage of admin_token"