force ssl and fix paypal notifications