merge leap ca

We figured we do not need to keep the CA separate from the webapp if we have a different CA for the client certs. That makes things a lot more simple.