Support creating users with a default_project_id

Add support in the client to pass the default_project_id attribute.
Also adding a test to make sure that such users automatically get a token
that is scoped to their project - even when requesting an unscoped token.

Change-Id: If4d04f1ac2908409d86e719607f9fa0b1241b997
Add ca_certificates_file option to test against SSL servers

tempest has an option to ignore SSL errors
(disable_ssl_certificate_validation) but no way to pass in
a CA bundle to be used to do actual validation. This new option,
ca_certificates_file, will provide this bundle.

boto testing will be handled separately as it gets CA
certificates from its configuration file.

This is configured in either /etc/boto.cfg or the file pointed
to by $BOTO_CONFIG via:

[Boto]
ca_certificates_file = /path/to/ca-bundle.pem

Change-Id: I5662e881f7d71ed34a8fe4b9d0a2541a6ff1bad3
Closes-bug: #1395754
Merge "Support creating users with a default_project_id"