changed redirects to redirect to SSL