Update security/hitch to 1.4.0.

hitch-1.4.0 (2016-09-12)

- Fix a bug in the OCSP request code where it broke if the OCSP
  responder required a Host header. (#113)
- Add support for ECC certificates (#116).

hitch-1.4.0-beta1 (2016-08-26)

- NPN/ALPN support for negotiating a protocol in the SSL handshake.
  This lets you use Hitch for terminating TLS in front of an HTTP/2
  capable backend. For ALPN, OpenSSL 1.0.2 is needed, while NPN
  requires OpenSSL 1.0.1.
- Expanded PROXY protocol support for communicating an ALPN/NPN
  negotiated protocol to the backend. Hitch will now include the
  ALPN/NPN protocol that was selected during the handshake as part
  of the PROXYv2 header.

(fhajny)