remove some unnecessary logging and out-of-date comments
retrieve the secure_connection column from the routes table
use https for backend connection if secure_connection flag is set