Fix errors on `vagrant up`

* Specify a box url so that it can be retrieved when not already in place on a users machine
* Don't auto upgrade Chef, this leads to an incompatibility with the Ruby resulting in an error, see this bug: https://github.com/opscode/chef/pull/734