Add setting to make request.is_secure() and BrowserID authentication working again on servers behinds load balancers