VM: load services from fracas-services image

CoreOS is awesome in that the entire configuration of the OS is in a few
short systemd unit files. But how do those files get onto the machine?
And how are they managed, e.g. how do they get updated?

Answer: stick them in a container! This way, updates can be fetched with
a simple `docker pull`. See the Vagrantfile for how to get the services
out of the container and onto the host, and for what to do after they're
on the host.
VM: check elasticsearch is up before seeding
Add env variable to disable Persona
Allow setting httpPort and httpsPort from JS
Log what port we're listening on

We already log the URL clients should hit. But when you're using a
reverse proxy, that's different from the port our app server is
listening on.
Use separate logger for PhantomJS

Now it should be obvious what phantom is doing vs what we're doing.
Fix form tests
Turn off CSP for PhantomJS

This should hopefully fix our rendering issues.
CSP: we no longer use Google Fonts
Make CSP headers a little smaller
Save snapshots in Redis

This way separate services, that may not share /tmp, can serve Phantom
requests.
Phantom: set --ssl-protocol=tlsv1

See https://github.com/ariya/phantomjs/issues/12670