wiki: set HTTPS=on header
    
    This makes sure that PHP sees that https is used, and that unbreaks the
    Special:ReplaceText form (which uses a http form target without this
    header, and doesn't survive the redirect to https)