fix SSL redirect headers in preprocess_request. closes #27. closes #28.

Cloudflare's 'fake' SSL terminates before sending the request to Heroku, so we need to check for both Cf-Visitor and HTTP_X_FORWARDED_PROTO.