Refactor as fully-functional reverse proxy

* Use ERB for server.conf
* Process list of `UPSTREAM_SERVERS` passed via ENV
* Ensure new SSL certificates each run
* Add `FORCE_SSL` option to automatically redirect all requests to HTTPS

Merging into "experimental" branch for now, so as not to interfere with existing apps that depend on master.