added default value when retrieving canvas_token from secure.py in an effort to not disrupt the other tools that don’t need this value
fixed http/https detection in add_user xml config view