Sync templates with Havana

The only real changes are:
 - stop explicitly defining bind_port in config files (we were always
   using the default value anyway), except for proxy-server.conf
 - drop auth-server.conf.erb (was dropped upstream)
 - remove setup_console_handler options (not existing upstream anymore)
 - stop setting workers for container/object servers: default is using
   automatic, which is saner
 - add healthcheck to pipeline of account/container servers
 - use run_pause option instead of non-existing interval option for
   replication interval in the object server
 - move bind_ip in proxy-server.conf from filter:tempauth group to
   DEFAULT (where it's using the default value)

Co-Authored-By: Sascha Peilicke <speilicke@suse.com>
Set keystone_api_insecure option in dispersion.conf
Remove unneeded variable for template
Always define the filters

When they're not in the pipeline, then they won't be used, so no need to
filter them out.
Rename auth_token filter to authtoken

(just to be in sync with upstream)
Rework the pipeline in proxy-server.conf

The order of the filters matters, and we can't rely on a random order.
create ssl certificate automatically for smoketest
Revert workers settings to previous state

As some of the services are running on the same node, we need to
evaluate the impact first, so let's stay safe for now.
Always have ceilometer last before proxy-server in pipeline
Fail if storage node has no disk for swift

Currently, we do not say anything and people think the storage node will
do something while it's not true.
Merge pull request #201 from jdsn/create-certificate

create ssl certificate automatically for smoketest
Merge pull request #207 from vuntz/fail-if-no-disk

Fail if storage node has no disk for swift
Merge pull request #191 from vuntz/havana-templates

Sync templates with Havana
Fix keystone-signing directory
Merge pull request #209 from vuntz/signing_dir

[roxy] Fix keystone-signing directory