detect request scheme rather than guess https

Also needs (already present on leviathan):

```conf
proxy_set_header X-Forwarded-Proto https;
```

inside `location {}`