lower case forwarded protocol before comparing to 'https'