Added option to header for enforcing https, by default disable frontend/php.