Remove debug.php from secure and add define to branch module to avoid hard coded @appstate for shibboleth authentication.