Clarify secure scheme header warning in deploy doc

Gunicorn doesn't restrict the X-Forwarded-For header, only the
scheme header.