set all apps settings accordingly when changing secure_submissions setting
set secure_submissions=True on new domains
make create_domain create insecure domain, for testing
fix pact tests
Merge pull request #3360 from dimagi/default-secure-submissions

Default secure submissions