Don't bother opening DNS or HTTPS ports in firewall
Added OntoFox, major refactoring

- added role for OntoFox
- moved MySQL into separate role
- renamed 'ontobee' to 'ontoden' for shared SQL
- renamed 'triplestore' role to 'virtuoso'
- automated import of OBI ontology
- better use of vars for ontobee and ontofox roles
- disabled firewall in 'testing' mode (Vagrant)
- MySQL listens for external access in 'testing' mode (Vagrant)
- MySQL allows access from 172.16.100.1
- updated README
- using xip.io links in README