Revised template for FamilySearch

Added some whitespace for readability, added a permission to the IAM
role, forced the ASG’s availability zone to be us-east-1a or us-east-1b
instead of getting an available one at launch (currently, us-east-1a
and us-east-1b are reserved and cheaper than using any other zone), and
added a REST ingress for port 8080 (default tomcat port).