Makes web service "host" setting global

Previously this setting was tenant-specific, but that prevented
self.site from working when the tenant changed. Now the host setting is
global, but the cert info have been moved into a “tenant_options” node
in web_services.yml.