This is a short term hack as a quick patch for an issue seen in production.
The url protocol is actually https, but somehow when we are here the x-forwarded-proto is incorrectly set to http. As a result the signature is invalid. The following code recovers from that condition.