ThirdParty and DataCustodian Certificate

[jateeter]

We need to enforce signed certificates on both services within services.greenbuttondata.org

[jateeter]

I think it not possible for the API sandbox (which runs on the local users machine) to have a signed certificate available. We could relax this to require self signed certificates for the Sandbox Only. Documentation to this effect needs written.