Update the Statement Service

For security reason, disallow HTTP include files if the source asset is
a HTTPS site or an Android app.
Change the include statement field name from "delegate" to "include".

Bug: 20323096
Change-Id: I5b35686fbf3bd220118883090c781a3868fe71c1