add new global config settings to disable ssl and allow for public facing host name
resx for new global settings
honor disable ssl global config setting
use public host name setting
update oauth2 library so we can set origin for callbacks to public host name