Use config to decide whether secureProxy = true
Template-ize header and rename -> .mustache