ipro-lff: Prevent handing out 200/OK when we can't rewrite in place

PSOL change for in_place_rewrite_context.cc
- Reorder setting the status code so we actually change the
  ResponseHeaders that we are using to serve
- Prevent non-error http status codes from being served up.

As noted by @jeffkaufman, to prevent a potential lifetime issue with
ResponseHeaders, remove the call to ps_release_base_fetch() in
ps_decline_request().

PSOL patch:
```diff
--- ../rewriter/in_place_rewrite_context.cc	(revision 4020)
+++ ../rewriter/in_place_rewrite_context.cc	(working copy)
@@ -127,9 +127,20 @@
       // to us.
       streaming_ = false;
       set_request_headers(NULL);
+      // If we cannot rewrite in-place, we should not serve a 200/OK.
+      // Serve kNotFound instead to fall back to the server's native
+      // method of serving the url and indicate we don't want it recorded
+      // either.
+      // TODO(oschaaf): When the resource is loaded via LoadFromFile,
+      // this code gets repeatedly hit for the same url. That might
+      // become a drag when the file in question is very large and popular.
+      // Marking urls that end up in this flow as not cachable in the http cache
+      // at this point had no effect (for the LoadFromFile flow at least).
+      if (!response_headers()->IsErrorStatus()) {
+	response_headers()->set_status_code(HttpStatus::kNotFound);
+      }
       set_response_headers(NULL);
       set_extra_response_headers(NULL);
-      response_headers()->set_status_code(HttpStatus::kNotFound);
       SharedAsyncFetch::HandleDone(false);
     }
   }
```
Merge pull request #721 from pagespeed/oschaaf-lff-ipro-trunk-tracking

ipro-lff: Prevent handing out 200/OK when we can't rewrite in place
update nginx_system_test to use signed resources.
Merge pull request #724 from pagespeed/crowell-signed-urls

signed-urls tests added.
make check-from greps be silent, and remove extra 'read' that was causing smoke tests to apparently hang
Merge pull request #726 from pagespeed/jmarantz-remove-spew-and-extra-read

make check-from greps be silent, and remove extra 'read'
Change SystemServerContext::kStatistics to AdminSite::kStatistics.
Merge pull request #727 from pagespeed/xqyin-refactor-admin-site

Change SystemServerContext::kStatistics to AdminSite::kStatistics
Support setting NumRewriteThreads and NumExpensiveRewriteThreads

Several rewrite driver factory options are duplicated between apache and nginx.  Instead of duplicating this one too, a PSOL change moves them into system/, and this change takes advantage of that move.
options: move global option parsing to system/
Merge pull request #731 from pagespeed/jefftk-thread-config

options: support setting NumRewriteThreads
testing: a server block for testing load from file with ipro