X-Forwarded-Proto and HTTP_X_FORWARDED_PROTO checked for just in case