update InAppProduct API logo_url validations

Allow blank logo_url and verify the scheme is http or https if it is
present.