Documenting SECURE_PROXY_SSL_HEADER, and adding in a test in heroku_audit