More HTTP_X_FORWARDED_PROTO header work

https://github.com/opencart-ce/opencart-ce/commit/36260c439ee624bb1a9d77cc3e5f9a23a1bd3853#commitcomment-3924059
Revert "More HTTP_X_FORWARDED_PROTO header work"

This reverts commit 30ff6ac548bf11a1f204668c217286352d505afa.
Much simpler HTTP_X_FORWARDED_PROTO header fix

Also set Paypoint and Worldpay to be more consistent/inclusive when
checking for HTTPS
Authorize.net server response parsing issue

https://github.com/opencart/opencart/issues/814
Added "X-Frame-Options" clickjacking protection

https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
Added cryptographically secure random hash gen

This function adds a cryptographically secure method to generate random
hashes.  It can be used to replace OpenCart's use of md5(mt_rand())
which has been shown to be insecure.
Moved to cryptographically secure hashes

Select areas now use new hash_rand() function
Fix for customer login from admin redirect
Update session settings
Update session settings in startup.php
Regenerate session id on login
Add token to selected customer forms for #10

Token set in GET to unsure compatibility with existing themes.
Closes #21 non-SSL links
Correct it's should be its in coupon warning

https://github.com/smithbr/opencart/commit/9e96631a89e20947666303cd7d0853b42bf12684
More its typo fixes
Small fix for non-SSL links commit
Fix customer returns list
Register link to cart not consistent with others
Fix Nochex cancel URL and whitespace
Fixes #22 multilanguage reward points email