Add disable_http property to ha_proxy and make external_protocol
overridable

 - Regenerate bosh-lite's HA Proxy certificate since the old was was invalid
 - Set uaa_certificate on bosh-lite property so that login will trust it

[#84907314]