CORE-4173: added a new pass-through endpoint for /secured/app/:app-id