Don't ignore request.secure() when constructing URLs. Add a method to make it easier to construct URLs by not forcing you to have a request object.