Force secure attribute on cookies (may break plain-http)...

We're running this behind Keter, which terminates SSL, and I'm guessing
either it doesn't set an X-Forwarded-Proto header, or WAI doesn't know
to look at it.
Bump Vagrant Keter version to fix SSL memory leak.
Makefile target to configure host using littlechef