Update dotmarketing-config.properties (#26967)

The `json.web.token.allowhttp` property had its default changed from `true` to `false` about a year ago, but the comment above it was not updated to match; it still seemed to imply a default of `true`, and encouraged users to change it in a production environment. This could lead to confusion, or worse!

Co-authored-by: erickgonzalez <[email protected]>

dotCMS/src/main/resources/dotmarketing-config.properties

@@ -686,7 +686,7 @@ STATIC_PUSH_RETRY_ATTEMPTS=3
 
 
 # Allow HTTP Authentication
-# THIS IS A SECURITY RISK FOR DEVELOPMENT ONLY, CHANGE THIS IN PRODUCTION ENVIRONMENTS
+# THIS IS A SECURITY RISK. ADJUSTABLE FOR DEVELOPMENT ONLY; LEAVE FALSE IN PRODUCTION ENVIRONMENT.
 json.web.token.allowhttp=false
 
 # Max "Remember Me" Token Age in Days