Change to require the careportal to be enabled before use

Since not everyone will want the care portal and we don't have auth in place this will make the care portal disabled by default.

To enable 2 ENV VARS need to be set `API_SECRET` and `ENABLE`.  The `ENABLE` ENV VAR will accept a space delimited string with a list of features.  To enable the care portal it should be set like `ENABLE="careportal"`

@bewest does this work for you?  If so I'll try to give the people using the dev branch a heads up before I merge this.