even more fixes

- doc fixes
- define external variables and abstract them out
- firewall fixes
- add firewall rule for enabling remote unauthenticated port
- formatting fixes
- BUG - force installation of cloudmonkey in order to enable the
unauthenticated API locally.  Fortunately, it’s firewalled off from the
outside.