Fixes for Heat and Horizon.

- Heat puppet module has been updated, which means we need to split out
  call to heat::keystone::auth to also call heat::keystone::auth_cfn.
- Horizon needed to be set to top scope call since we now have a
  quickstack::horizon class.