update to document explicit use of box add. remove --insecure from box config in Vagrantfile