Make WebRequest::protocol protected as it's used in subclasses in the same file

Change-Id: If894e9122fa56e957c666c887fb33ed60733ac0e