add provider_admin password udpate playbook
avoid race condition when updating p_admin pass and stackrc
keystone setup: refactor out of openstack-setup role
keystone_service: fix non-token based auth

The keystone_service module included a mostly complete username/password
based authentication path, fix this path so we don't need to rely on
auth token.
Initial support for Openstack Ironic

* Increased complexity of db sync tasks to utilize alembic for db
   migrate.
* Ironic feature flags/tags ( ironic.enabled/ironic ).
* Seperate roles for common and control.
* Had to go into virtualenv as it caused issues with the shared python libs.
changes as per suggested in PR comments
Firewall: standardize usage on ufw module
ufw: remove ufw module

It ships with Ansible
cleanup horizon tasks
allow for a prefix so we can specify ENV variables
use the prefix for os-api sensu checks
check_glance_store check
allow for 'disabled' checks
check-glance-store check instantiated - disabled for now
add check_glance_store.py to sensu sudoers
sensu_check supports env_vars
check_glance_store uses GLANCE_IMAGE_STORE env_var
enable check-glance-store sensu
rename check-glance-store.py
check-glance-store.py: pep8