sniff forward-proto header to detect if client requested https