removed ssh notify that could cause users to be locked out in staging environment. This does not affect the production install. For production install the iptables rules and ssh config are not applied until the server reboots at the end of the playbook.
added a tag to the validate role, and added skipping that tag for the demo instances for the demo instances. This is needed since the validate role will error out if the user is vagrant. This tag does not affect production installs and admin should modify the anisble command listed in the full_instructions.