Remove CONFIGURE_APP option
Introduce app sources hash and simplify validation