Make use of req.secure flag