respect HTTPSUseForwardedProto more precisely

Previously, we had been applying HTTPSUseForwardedProto
only in the case where the incoming connection does not
use TLS. Instead, when HTTPSUseForwardedProto is set, we
want to use X-Forwarded-Proto regardless of the direct
incoming connection.