Change secure to scheme.

* default scheme to http
* make it public so it can be changed
gofmt.