Fix secure.travis-ci.org redirect

`fullpath` starts with SCRIPT_NAME. From the Rack spec:

> The SCRIPT_NAME, if non-empty, must start with /

Fixes travis-ci/travis-ci#1278.