Hello Saad,
it is the default behaviour when using the internal reverse proxy.
The Application is only reachable once you logged in to the Device.
The option you mentioned "Allow application access without login" is only valid for the Unified Comfort Panel Edge Device.
The Option you are looking for is the "Secure Redirection" checkbox in the publisher, you can see a screenshot here:
I hope this helps you
Hello Saad,
HTTPS between Reverse Proxy and you App is not required, you can also use HTTP.
The reverse proxy will handle the HTTPS termination and forward the request unencrypted to you application.
Please also check out the Hello-World application: https://github.com/industrial-edge/hello-world