Allow optionally forcing SSL

This is useful for misbehaved load balancers that terminate SSL without
informing the app server of that fact.