#424. Fixed an issue where a user may have gone to a secure page, and
then tried to go to a unsecured page.  They never go back to non-SSL.
The reason is that the line "!invocation.getHttpRequest().isSecure()"
returns false if the SSL terminated at the LB.  Now, in this case, we
need to key, first off of the X-Forwarded-Proto header to see if this is
SSL.  If so, we can redirect to non-ssl.