Fix route_registrar path logic in bpm template

- invoking .sub!() was replacing the string in-place, causing the data
path to be added twice
- Also brings back routing_api.auth_disabled flag to the routing_api bpm
template because we accidentally forgot it

[#175826416](https://www.pivotaltracker.com/story/show/175826416)

Author: rroberts2222

jobs/route_registrar/templates/bpm.yml.erb

@@ -39,7 +39,7 @@ unless paths.empty?
 
    paths.each do |path|
      unsafe['unsafe']['unrestricted_volumes'] << {"path" =>  path, "allow_executions" => true}
-     unsafe['unsafe']['unrestricted_volumes'] << {"path" => path.sub!('jobs', 'data')}
+     unsafe['unsafe']['unrestricted_volumes'] << {"path" => path.sub('jobs', 'data')}
   end
 
   bpm['processes'][0].merge!(unsafe)

jobs/routing-api/templates/bpm.yml.erb

@@ -23,6 +23,10 @@ bpm = {
   ]
 }
 
+if p('routing_api.auth_disabled') == true
+  bpm['processes'][0]['args'] << "-devMode"
+end
+
 if p('golang.x509ignoreCN') == true
   bpm['processes'][0]['env'].merge!({"GODEBUG" => "x509ignoreCN=0"})
 end