Close ports 6666 and 80 by default with CSF; open 443

IRC and HTTP will not be needed on all servers; 443 (SSL) is needed
by pip and other services
Merge pull request #3 from CenterForOpenScience/ports

Close ports 6666 and 80 by default with CSF; open 443
Merge pull request #4 from CenterForOpenScience/roles

Roles
Update to ubuntu/trusty64
Fix user/group creation; updates auth role -> generic-users
Merge branch 'fix-users'