use https in target for cf api command

James recently wrote on the vcap ML "we don't test configurations without ssl", so let's not suggest to BOSH Lite users to use http.