Disabled ssh host key file checking for development/staging ansible.cfg file. Production uses a different file. Disabling the check makes it easier to use the ansible-playbook command outside of vagrant which sets this by default.
authd is the server side process for OSSEC way of automating adding the agent to the server. Authd is configured to listen for *unauthenticated* connections from the app servers IP and then without verification exchange the agent's cleint.key
will all different task to ensure that authd is not running after the agent connects.
agent_auth is the agent side of the OSSEC process for automaticaly added an ossec agent to an ossec server.
will need to add other tasks to remove the firewall exemptions
after the OSSEC agent connects to the OSSEC server these tasks will ensure that the firewall rule exemptions and that authd is disabled.
combined the securedrop-app-staging.yml and securedrop-mon-staging.yml into securedrop-staging.yml

Organized calling the hosts and what roles to automate adding the ossec agents.
Order of events:
Monitor server is provisioned
Monitor server starts authd
App server is provisioned
App server starts agent_auth
App server removes ossec authd firwall exemptions
App server's ossec agent is restarted
Monitor server removes ossec authd firewall exemptions
Monitor server's ossec server is restarted
In the Vagrantfile have the app-staging and mon-staging vm skip running authd. This will ensure the playbook doesn't get hung if just one server is brought up.
combined the prod app and mon playbooks the same way as the staging playbooks in the commit before
updated the master site.yml playbook to reflect changes in the staging and prod playbooks.
updated the develop doc to reflect ansible-playbook command to use with vagrant to provision both servers at the same time