Refactor to solve secure_uri issues

- matchers are now closures with arbitrary code inside
- domain and secure_domain are simple strings, but could be closures
that take the current site version as paramerter
Unless you use the static `bind` or the instance `bindTo` method, there is no point to force a `Closure`.