Don't access :allow_ssl_in_* during initialization

This causes changes to `Spree::Config.allow_ssl_in_*` (see) to be used at runtime without a server restart.