_isHTTPS : add control on X-Forwarded-Proto = https

In a situation where the PHP application sits behind a reverse proxy or load balancer ssl offloading, we need to check the X-Forwarded-Proto HTTP header set by the frontend.