docs: public static String getRequestScheme(HttpServletRequest req) {
          String scheme;
          if (req.getScheme() != null)
              scheme = req.getScheme().toUpperCase();
          else
              scheme = AuditEvent.REASON_TYPE_HTTP;
          return scheme;
      }