Added CSRF exemption to /member/valid_user/ .

Included a configuration example for how to make request.is_secure() work
behind a reverse proxy.