all: support insecure mode

- pomerium/authenticate: add cookie secure setting
- internal/config: transport security validation moved to options
- internal/config: certificate struct hydrated
- internal/grpcutil: add grpc server mirroring http one
- internal/grpcutil: move grpc middleware
- cmd/pomerium: use run wrapper around main to pass back errors
- cmd/pomerium: add waitgroup (block on) all servers http/grpc

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

authenticate/authenticate.go

@@ -45,6 +45,7 @@ type Authenticate struct {
 	RedirectURL *url.URL
 
 	cookieName   string
+	cookieSecure bool
 	cookieDomain string
 	cookieSecret []byte
 	templates    *template.Template
@@ -108,5 +109,6 @@ func New(opts config.Options) (*Authenticate, error) {
 		cookieSecret: decodedCookieSecret,
 		cookieName:   opts.CookieName,
 		cookieDomain: opts.CookieDomain,
+		cookieSecure: opts.CookieSecure,
 	}, nil
 }