Preventing odd scenario where site_url might already be https (or vice versa).
PHP spec just calls for HTTPS to not be set, not specifically off. This return wrong results in my nginx install personally. See http://php.net/manual/en/reserved.variables.server.php
Fixing my stupid tabs. I blame git.
Merge pull request #18 from eedfw/master

Fixes pertaining to secure function.