Fix https support.

Request::secure(), not Request::protocol()