Change from Scheme to IsSecure as authoritative.

Reviving this PR for beta2. This primarily affects servers, not applications or middleware.

#102 
Except that throwing from property setters is discouraged.