Change from Scheme to IsSecure as authoritative.

Reviving this PR for beta2. This primarily affects servers, not applications or middleware.

#102 
I don't understand why you're changing the scheme in the first place. Why isn't it just a get/set?