add secure_submissions setting for apps

for CommCare 2.8+

Basic auth'd submissions feature is now ready to test end to end
Merge branch 'app-secure-url' into staging2