set x-forwarded-proto when listening in ssl

[scambra]

so backend knows connection was using ssl even if backend uses plain http