Forward host ports to the loadbalancer guest
Bind a port using a PSF_CA certificate for Fastly to use
Detect if the incoming request is from Fastly

* Ensure that X-Forwarded-Proto is correct based on if this is Fastly
  or not.
* Strip any headers that start with Fastly-* before it hits the
  backend.
Strip any X-Forwarded-* header from the request
Allow numbers in the Fastly header
Pass X-Forwarded-For if fronted by Fastly and switch to http-request
Deny requests with an invalid Fastly-Token header
Move the fastly token into a seperate file to hide from salt diff
Small whitespace formatting to make it easier to read
This should be a string
Refactor Fastly backends to flow through HAProxy instead of directly
Switch the downloads role to route through HAProxy
Remove the states for handling the "direct" fastly backends
Document configuring services with Fastly
Merge pull request #12 from dstufft/fastly-via-haproxy

Service Fastly Fronted Services via HAProxy