Ensure X-Forwarded-Proto header proxied

This makes sure unicorn knows what the http/https scheme is so that
rails config.force_ssl doesn't cause a redirect loop