detecting https

some servers with load balancer does not respond with HTTPS but with HTTP_X_FORWARDED_PROTO only.