Remove profileManager.configSet

It's unused. Removing so we don't have to replicated it into `podClient`.
Bottleneck profileManager.authSet through allSet

Besides greatly simplifying the code, this puts all merging logic in one place,
which will allow us to build just one pod endpoint that receives a mergeable
object. Otherwise, we would have been forced to fetch the data from the pod,
merge locally, the send it back to the pod.

Some of the simplification emerged from the fact that even though `authSet`
treated `app` as optional, we always call with one. I rearranged the arguments
to help indicate that it's no longer optional, and to put the effective key
(`[pid, app]`) together.
Fix tests

- Update to look for `lb.pod#.pods`
- Now that nexus uses `host`/`port` instead of `url`, we need to pass `hostname`
  to `url.format` - `host` causes it to ignore the `port` value.
- Removed `url` from `lconfig.nexus`; it's unused
- Added `secure` default to `lconfig.nexus` to be explicit
- Removed double-request-callback debug code