Replace/strip rpc urls before deploying an order #2165

If a user has some api tokens in their rpc definitions, creating an order would leak this to everyone.

We should be able to remove/strip the rpc urls and put local/webapp settings in place of those if needed.