Make web TLS CA cert optional

[taylorsilva]

Edit: realized I PR'd this into master when I meant to pr it to dev. It's fine as long as no one uses the feature.

Contributor Checklist

• [ ] Variables are documented in the README.md
• [ ] Which branch are you merging into?
  • master is for changes related to the current release of the concourse/concourse:latest image and should be good to publish immediately
  • dev is for changes related to the next release of Concourse (aka unpublished code on master in concourse/concourse)

Reviewer Checklist

This section is intended for the core maintainers only, to track review progress. Please do not fill out this section.

• [ ] Code reviewed
• [ ] Topgun tests run
• [ ] Back-port if needed
• [ ] Is the correct branch targeted? (master or dev)