redirect all requests with x-forwarded-proto=http to https route

this allows us to make use of heroku's piggyback ssl