Make create roles idempotent

Cleaning create roles to what is in latest devtest.
Making create role calls idempotent.
Making create roles part of setup-endpoints,

Blueprint: tripleo-juno-keystone-setup-inside-template
Change-Id: Ic6edfba0e9630e67e0c85d335db389d145c9a482