Hmm, actually the way we handle this in undertow looks a bit screwy. This PR still should go in, but undertow needs to change to recongise that request has SSL on the front end.