Use X-Forwarded-Proto when we TrustFowardHeader

If vulcan is behind another proxy/lb, we may need to keep the
X-Forwarded-Proto header from the incoming request