So they can only use port 80?
Seems to me you need to just make the SSH server listen on port 80.
ssh -L creates a tunnel, so say, you can goto http://localhost:8080/, and that gets forwarded, via an SSH tunnel, to the host you set the tunnel up too (effectivly sending everything via the...