always set x-forwarded-proto and ssl to prevent malicious overwritting
Merge pull request #799 from simplysoft/nginx_x-forwarded-ssl

Prevent malicious overwriting of x-forwarded-proto and ssl