add dedicated WEBSOCKET_SSL setting

Overloading DEBUG for this purpose forces vcweb-dev.asu.edu to
insecurely load sockjs.