fixing a possible but tiny/rare exploit
fixing a possible but tiny/rare exploit

* project_id should always come from keystone_user
* renaming 'tenant' to project for consistency

Change-Id: I1f63cae4b70f34f5350691df8edf0f0bae9092f1

catalyst/stacktask