forces ssl in production