Merge pull request #1682 from edx/jarv/default-for-oath

adding override for OAUTH_ENFORCE_SECURE

playbooks/roles/edxapp/defaults/main.yml

@@ -352,6 +352,7 @@ EDXAPP_CELERY_WORKERS:
     concurrency: 2
 
 EDXAPP_DEFAULT_CACHE_VERSION: "1"
+EDXAPP_OAUTH_ENFORCE_SECURE: True
 
 #-------- Everything below this line is internal to the role ------------
 
@@ -640,6 +641,7 @@ lms_auth_config:
 
 lms_env_config:
   <<: *edxapp_generic_env
+  OAUTH_ENFORCE_SECURE: $EDXAPP_OAUTH_ENFORCE_SECURE
   PAID_COURSE_REGISTRATION_CURRENCY: $EDXAPP_PAID_COURSE_REGISTRATION_CURRENCY
   SITE_NAME:  "{{ EDXAPP_LMS_SITE_NAME }}"
   VIDEO_CDN_URL: "{{ EDXAPP_VIDEO_CDN_URLS }}"