SSL detection is faulty

The current SSL detection isn't working on IIS, while IIS have $_SERVER['HTTPS'] = "off" set if traffic is non-SSL. This small change fixes the bug:

    // Are we on a secure page?
    if($_SERVER['HTTPS'] == "on") {
      $prefix = 's://ssl';
    }