Looks like you need to add a parameter to acs-tcl, something like: https_behind_proxy
and add the logic to security::locations to include the https option..
cheers,
Torben