Change from Scheme to IsSecure as authoritative.

Reviving this PR for beta2. This primarily affects servers, not applications or middleware.

#102 
Yes, but the whole project needs to be scrubbed for those so I don't want to change them piecemeal.