Allow forwarded hosts for forced SSL