fix heat domain configuration

This change corrects a number of problems with the heat configuration,
specifically for authentication using the "trusts" model. This involved
creating a "heat" domain. The heat package was also upgraded to current
stable/icehouse to include bug fixes.

Fixes #195