removed django-secure in favor of SECURE_PROXY_SSL_HEADER