support registration and login via apache + mod_wsgi + mod_shib

Note that we now thing that gunicorn and mod_wsgi should not live
on the same machine if they are running the exact same codebase
with the exact same edx logging directories.  This seems to
cause deadlock at random times

Allow the bastion box to reach all IPs on the 10.0.x.x subnet.

Jbau/new edx theme

This commit basically does 3 things:
* Creates symlinks within the playbooks/edx-west directory
  to allow ansible-playbook to be run in that directory
* Adds support for creating theming directory and checking out
  themed git repo into that directory at deploy time.
* Moves around some of the edxapp deploy handlers.
  Also tags them all with - deploy, so that running
  ansible-playbook with --tags=deploy basically just deploys.
  Also splits restart edxapp into stop and start edxapp b/c
  restart wasn't working on Stanford servers.  Could debug
  this later, probably best by looking at the edxapp upstart script.

allow ini file setting via environment variable

Extend ec2.py to accept an ini file

* End the constant reversion of ec2.ini preferences by allowing ec2.py
  to accept an ini file on the command line, and checking in an ini for
  edx-west that suits their needs.

Feanil/documentation

Feanil/ansible deploy

Tasks that should be re-run when a new version of the code
is installed are now handlers that are notified once the code has
been checked out and the directory is ready(ownership change).

Put the configuration information in the vars for the nginx role
since that is the only role that uses it.

There is no need to re-run it after it has already been run
in common.

nginx logrotate fixup

* Set postrotate script to SIGHUP nginx after rotation
* Explicitly set permissions on freshly created logfiles

Added actions that would result in static assets for the cms and lms
to be generated after the edxapp has been checked out.

Providing a full path to the secure repository works just fine.