Added WordPress rules to the default.vcl file and removed the security thing in the varnish file.  The WordPress rules in default.vcl include rules to not cache anything for logged in users based on the login cookie.  I could write a better commit message if I weren't so tired, so forgive me if this makes no sense.
Merge remote-tracking branch 'TheLastCicada/vcl-work' into varnish