forcing production to use ssl