Urgh.  Force SSL in production