it's how `ssl_required` is implemented. it enforces ssl if `DEBUG=False`