Changed to rack ssl, HSTS false