Fixed up the included headers and ordering so that erchef won't freak out.

Copied the privateEncrypt function from chef-golang over to do the encryption. rsa.SignPKCS1v15 does not sign the request in a way that Chef agrees with.