client-sessions requires a req.connection.proxySecure hint