More HTTPS fixes.
Forced HTTPS redirect.
more HTTPS fixes.
Changed header to use X-Forwarded-Proto
redirect loop debugging.
Switched to using request().getHeader(..)
Forced HTTPS on all. Need to find a better way to intercept all
requests.
undo HTTPS for everything expect index()