[liboauth] OAuth integration Redirect URL is Assumed to be HTTP

The Hue OAuth integration assumes that HTTP is the protocol used by the OAuth redirect URL (see hardcoded value "http" in "-" part of patch).

This patch also adds checking to the new function that checks for the X-Forwarded-For header for applications behind SSL-terminated reverse proxies