update InAppProduct API logo_url validations

Allow blank `logo_url` and verify the scheme is http or https if it is present.