Move SSL termination to haproxy now that we're using 1.5.