Add securedUrlPrefix option

The `secureUrlPrefix` option will only apply the middleware to paths
that begin with the prefix.