added SECURE_PROXY_SSL_HEADER to default common settings to be aware of nginx redirect if nessessary (work well with django-nginx)
updated default secure_prefix for default security ehenced.