Fixed isSecure check to be compliant with the docs

According to the [php docs](http://www.php.net/manual/en/reserved.variables.server.php) the `HTTPS` field will be non-empty when the query was issued via HTTPS.

It isn't restricted only to "on" and 1.

Exception: "off" is sent by IIS