Proper detection of secured requests

From the docs: http://expressjs.com/api.html#req.secure