add lighttpd X-Scheme for HTTPS-only connection to README, closes #8