Minor changes

- enable depends_on so we don't start provisioning other nodes until
  heat-controller-1 is up (this is where we run ansible from and relies
  on everything else being online)
- include haproxy playbook in 'runlist'
- run pw-token-gen.py to populate passwords