Honor the 'X-Forwarded-Proto' header for request.is_secure()

https://devcenter.heroku.com/articles/getting-started-with-django#django-settings