Do not do the login-bypass if the HTTPS env var is ON.  This might indicate
that a remote HTTPS connection is being converted to HTTP locally using
stunnel (or the equivalent).