[orangelight] Add X-Forwarded-Proto https to the catalog load balance…

…r config

Without this, login and forms were failing in the catalog.  In the logs we saw:
HTTP Origin header (https://catalog-staging.princeton.edu) didn't match request.base_url (http://catalog-staging.princeton.edu)

Co-authored-by: Alicia Cozine <[email protected]>
Co-authored-by: Beck Davis <[email protected]>
Co-authored-by: Christina Chortaria <[email protected]>
Co-authored-by: Denzil Phillips <[email protected]>
Co-authored-by: Francis Kayiwa <[email protected]>
Co-authored-by: Kevin Reiss <[email protected]>
Co-authored-by: Ryan Laddusaw <[email protected]>
Co-authored-by: Stephanie Ayers <[email protected]>
Co-authored-by: Vickie Karasic <[email protected]>

roles/nginxplus/files/conf/http/catalog-prod.conf

@@ -63,6 +63,7 @@ server {
         proxy_pass http://catalog-prod;
         proxy_set_header X-Forwarded-Host $host;
         proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache catalog-prodcache;
         proxy_connect_timeout      2h;
         proxy_send_timeout         2h;

roles/nginxplus/files/conf/http/catalog-qa.conf

@@ -44,6 +44,7 @@ server {
         # app_protect_security_log_enable on;
         proxy_pass http://catalog-qa;
         proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache catalog-qacache;
         limit_req zone=catalog-qa-ratelimit burst=20 nodelay;
         proxy_connect_timeout      2h;

roles/nginxplus/files/conf/http/catalog-staging.conf

@@ -46,6 +46,7 @@ server {
 #        # app_protect_security_log_enable on;
         proxy_pass http://catalog-staging;
         proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Proto https;
         proxy_cache catalog-stagingcache;
         proxy_connect_timeout      2h;
         proxy_send_timeout         2h;