put contacts.wm.org behind misc. varnish

it currently uses a self-signed cert, this would
fix that

would have a follow-up change to kill the SSL part
of the Apache config


RT: 2087
RT: 7895

Change-Id: I5f78ce2c95f77a10bd16f408b33be70a853177e2
Merge "put contacts.wm.org behind misc. varnish" into production