Put $scheme in the cache key.

This ensures that HTTP and HTTPS pages are cached separately. This is
especially important when Drupal is using a module like securepages,
where /user on the HTTP side will just be a redirect to the HTTPS
version of the login form.